Najeebmedia Frontend_file_manager_plugin
10 CVEs affecting Najeebmedia Frontend_file_manager_plugin. Latest disclosed: 2023-12-04. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-4368 | Critical | 9.9 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 18.2. This is due to lacking ca… |
CVE-2021-4356 | Critical | 9.0 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Download in versions up to, and including, 18.2. This is due t… |
CVE-2021-4365 | High | 7.2 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to, and including, 18.2. This is due… |
CVE-2021-4350 | High | 7.2 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated HTML Injection in versions up to, and including, 18.2. This is due to lacking a… |
CVE-2023-5105 | Medium | 6.5 | 2023-12-04 | The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download fi… |
CVE-2021-4359 | Medium | 6.5 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 18.2. This is due to… |
CVE-2021-4344 | Medium | 6.4 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 18.2. This is due to lacking mishandling… |
CVE-2021-4369 | Medium | 5.8 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Content Injection in versions up to, and including, 18.2. This is due to lackin… |
CVE-2021-4351 | Medium | 5.8 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Post Meta Change in versions up to, and including, 18.2. This is due to lacking… |
CVE-2022-3126 | Medium | 4.3 | 2022-10-17 | The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in user… |