Frontend File Manager vulnerabilities

2 known vulnerabilities in Frontend File Manager from Najeebmedia. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Frontend File Manager: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-25903Mar 17, 2024N-Media

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a through 22.7.

• 8.8 High severity

  Frontend File Manager Plugin: Unrestricted Upload of File with Dangerous Type

  CVE-2022-3125Oct 3, 2022Frontend File Manager PluginEPSS 1.64%

  The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achi