Medium severity5.3NVD Advisory· Published Oct 3, 2022· Updated Jun 17, 2026
CVE-2022-3124
CVE-2022-3124
Description
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:najeebmedia:frontend_file_manager:*:*:*:*:*:wordpress:*:*Range: <21.3
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <21.3
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/00f76765-95af-4dbc-8c37-f1b15a0e8608nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.