CVE-2022-3126

MEDIUM

Frontend File Manager Plugin < 21.4 - Cross-Site Request Forgery via File Upload

Title source: llm
STIX 2.1

Description

The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf

References (1)

Core 1
Core References

Scores

CVSS v3 4.3
EPSS 0.0027
EPSS Percentile 18.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-352
Status published
Products (1)
najeebmedia/frontend_file_manager_plugin < 21.4
Published Oct 17, 2022
Tracked Since Feb 18, 2026