Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2025-14804

Frontend File Manager < 23.5 - Subscriber+ Arbitrary File Deletion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Frontend File Manager Plugin WordPress plugin before 23.5 did not validate a path parameter and ownership of the file, allowing any authenticated users, such as subscribers to delete arbitrary files on the server

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Frontend File Manager Plugin

Default version status: unaffected

  • 0 to < 23.5affected

References