WordPress Plugin Vulnerabilities
Frontend File Manager < 18.3 - Unauthenticated Post Meta Change to Arbitrary File Download
Description
The wpfm_file_meta_update AJAX action of the plugin, available to unauthenticated users, was lacking CSRF and capability check, allowing unauthenticated users to change arbitrary post metadata which could lead to arbitrary file download
Affects Plugins
Fixed in 18.3 References
Classification
Type
ACCESS CONTROLS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Jerome Bruandet (nintechnet)
Verified
No
WPVDB ID
Timeline
Publicly Published
2021-07-12 (about 4 years ago)
Added
2021-07-12 (about 4 years ago)
Last Updated
2023-06-08 (about 2 years ago)
WPScan 