Unrated severityNVD Advisory· Published Oct 17, 2022· Updated May 14, 2025

Frontend File Manager < 21.4 - File Upload via CSRF

CVE-2022-3126

Description

The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Frontend File Manager Plugincpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <21.4
Package: https://wordpress.org/plugins/frontend-file-manager-plugin

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/7db363bf-7bef-4d47-9963-c30d6fdd2fb8mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000