CVE-2021-4344
Frontend File Manager <= 18.2 - Privilege Escalation
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.4EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
07 jun 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The Frontend File Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 18.2. This is due to lacking mishandling the use of user IDs that is accessible by the visitor. This makes it possible for unauthenticated or authenticated attackers to access the information and privileges of other users, including 'guest users', in their own category (authenticated, or unauthenticated guests).
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Productos afectados
nmedia · Frontend File Manager Plugin¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →