CVE-2026-5337

The Frontend File Manager Plugin for WordPress (versions through 23.6 ) is vulnerable to an Insecure Direct Object Reference (IDOR) attack. The root cause is insufficient authorization verification when the plugin processes download requests. An authenticated attacker with Subscriber-level access...