Lucene search
Raad Haddad (Cloudyrion GmbH)PATCHSTACK:1155A9A20ACB9B45E7B489409D032C4BHistorySep 26, 2022 - 12:00 a.m.
WordPress Frontend File Manager plugin <= 21.3 - File Upload via Cross-Site Request Forgery (CSRF) vulnerability
2022-09-2600:00:00
Raad Haddad (Cloudyrion GmbH)
patchstack.com
12
wordpress
file manager
file upload
cross-site request forgery
vulnerability
update
0.001 Low
EPSS
Percentile
26.0%
File Upload via Cross-Site Request Forgery (CSRF) vulnerability was discovered by Raad Haddad (Cloudyrion GmbH) in the WordPress Frontend File Manager plugin (versions <= 21.3).
Solution
Update the WordPress Frontend File Manager plugin to the latest available version (at least 21.4).
| CPE | Name | Operator | Version |
|---|---|---|---|
| frontend file manager | le | 21.3 |
Related
nvd
nvd
CVE-2022-3126
2022-10-17 12:15:10
wpvulndb
wpvulndb
Frontend File Manager < 21.4 - File Upload via CSRF
2022-09-26 00:00:00
cvelist
cvelist
CVE-2022-3126 Frontend File Manager < 21.4 - File Upload via CSRF
2022-10-17 00:00:00
cve
cve
CVE-2022-3126
2022-10-17 12:15:10
prion
prion
Cross site request forgery (csrf)
2022-10-17 12:15:00
wpexploit
wpexploit
Frontend File Manager < 21.4 - File Upload via CSRF
2022-09-26 00:00:00