CVE-2026-8378

Affected software: Frontend File Manager Plugin for WordPress (up to version 23.6). Vulnerability: It does not sanitise or escape a filename submitted to the frontend file-rename endpoint, allowing the filename to be stored as post meta and rendered in the admin File Manager listing. Impact: Stor...