CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-4356

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Download in versions up to, and including, 18.2. This is due to lacking authentication protections, capability checks, and sanitization, all on the wpfm_file_meta_update AJAX action. This makes it possible for unauthenticated attackers to download arbitrary files on the site, potentially leading to site takeover.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 64.8%

CVSS Severity

CVSS v3 Score 9.0

References

Products affected by CVE-2021-4356

Najeebmedia » Frontend File Manager Plugin » Version: N/A

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:-
Najeebmedia » Frontend File Manager Plugin » Version: 1.0

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:1.0
Najeebmedia » Frontend File Manager Plugin » Version: 1.1

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:1.1
Najeebmedia » Frontend File Manager Plugin » Version: 1.2

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:1.2
Najeebmedia » Frontend File Manager Plugin » Version: 1.3

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:1.3
Najeebmedia » Frontend File Manager Plugin » Version: 1.4

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:1.4
Najeebmedia » Frontend File Manager Plugin » Version: 1.5

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:1.5
Najeebmedia » Frontend File Manager Plugin » Version: 1.6

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:1.6
Najeebmedia » Frontend File Manager Plugin » Version: 1.7

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:1.7
Najeebmedia » Frontend File Manager Plugin » Version: 1.8

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:1.8
Najeebmedia » Frontend File Manager Plugin » Version: 13.0

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:13.0
Najeebmedia » Frontend File Manager Plugin » Version: 13.1

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:13.1
Najeebmedia » Frontend File Manager Plugin » Version: 13.2

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:13.2
Najeebmedia » Frontend File Manager Plugin » Version: 13.3

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:13.3
Najeebmedia » Frontend File Manager Plugin » Version: 13.4

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:13.4
Najeebmedia » Frontend File Manager Plugin » Version: 13.5

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:13.5
Najeebmedia » Frontend File Manager Plugin » Version: 13.6

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:13.6
Najeebmedia » Frontend File Manager Plugin » Version: 13.7

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:13.7
Najeebmedia » Frontend File Manager Plugin » Version: 13.8

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:13.8
Najeebmedia » Frontend File Manager Plugin » Version: 13.9

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:13.9
Najeebmedia » Frontend File Manager Plugin » Version: 14.0

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:14.0
Najeebmedia » Frontend File Manager Plugin » Version: 14.1

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:14.1
Najeebmedia » Frontend File Manager Plugin » Version: 14.2

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:14.2
Najeebmedia » Frontend File Manager Plugin » Version: 14.3

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:14.3
Najeebmedia » Frontend File Manager Plugin » Version: 14.4

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:14.4
Najeebmedia » Frontend File Manager Plugin » Version: 14.5

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:14.5
Najeebmedia » Frontend File Manager Plugin » Version: 14.6

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:14.6
Najeebmedia » Frontend File Manager Plugin » Version: 14.7

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:14.7
Najeebmedia » Frontend File Manager Plugin » Version: 14.8

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:14.8
Najeebmedia » Frontend File Manager Plugin » Version: 14.9

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:14.9
Najeebmedia » Frontend File Manager Plugin » Version: 15.0

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:15.0
Najeebmedia » Frontend File Manager Plugin » Version: 15.1

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:15.1
Najeebmedia » Frontend File Manager Plugin » Version: 15.2

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:15.2
Najeebmedia » Frontend File Manager Plugin » Version: 15.3

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:15.3
Najeebmedia » Frontend File Manager Plugin » Version: 15.4

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:15.4
Najeebmedia » Frontend File Manager Plugin » Version: 15.5

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:15.5
Najeebmedia » Frontend File Manager Plugin » Version: 15.6

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:15.6
Najeebmedia » Frontend File Manager Plugin » Version: 15.7

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:15.7
Najeebmedia » Frontend File Manager Plugin » Version: 15.8

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:15.8
Najeebmedia » Frontend File Manager Plugin » Version: 15.9

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:15.9
Najeebmedia » Frontend File Manager Plugin » Version: 16.0

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:16.0
Najeebmedia » Frontend File Manager Plugin » Version: 17.0

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:17.0
Najeebmedia » Frontend File Manager Plugin » Version: 17.1

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:17.1
Najeebmedia » Frontend File Manager Plugin » Version: 18.0

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:18.0
Najeebmedia » Frontend File Manager Plugin » Version: 18.1

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:18.1
Najeebmedia » Frontend File Manager Plugin » Version: 18.2

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:18.2
Najeebmedia » Frontend File Manager Plugin » Version: 2.0

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:2.0
Najeebmedia » Frontend File Manager Plugin » Version: 2.1

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:2.1
Najeebmedia » Frontend File Manager Plugin » Version: 3.0

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:3.0
Najeebmedia » Frontend File Manager Plugin » Version: 3.1

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:3.1
Najeebmedia » Frontend File Manager Plugin » Version: 3.2

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:3.2
Najeebmedia » Frontend File Manager Plugin » Version: 3.3

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:3.3
Najeebmedia » Frontend File Manager Plugin » Version: 3.4

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:3.4
Najeebmedia » Frontend File Manager Plugin » Version: 3.5

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:3.5
Najeebmedia » Frontend File Manager Plugin » Version: 3.6

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:3.6
Najeebmedia » Frontend File Manager Plugin » Version: 3.7

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:3.7
Najeebmedia » Frontend File Manager Plugin » Version: 3.8

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:3.8
Najeebmedia » Frontend File Manager Plugin » Version: 3.9

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:3.9
Najeebmedia » Frontend File Manager Plugin » Version: 4.0

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:4.0
Najeebmedia » Frontend File Manager Plugin » Version: 4.1

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:4.1
Najeebmedia » Frontend File Manager Plugin » Version: 5.0

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:5.0
Najeebmedia » Frontend File Manager Plugin » Version: 5.1

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:5.1
Najeebmedia » Frontend File Manager Plugin » Version: 5.2

cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:5.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-4356

Products

Pricing

Contact Us