Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-5105

Frontend File Manager < 22.6 - Editor+ Arbitrary File Download

Description

The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as `wp-config.php`

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Frontend File Manager Plugin

Default version status: unaffected

  • 0 to < 22.6affected

References