CVE-2026-8379

The CVE-2026-8379 entry relates to the Frontend File Manager Plugin for WordPress (up to version 23.6). The root cause is improper enforcement of the nonce check on the file download handler, enabling unauthenticated attackers to download files uploaded by any user by iterating identifiers. This ...