CVE-2021-4344: Frontend File Manager <= 18.2 - Privilege Escalation
The Frontend File Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 18.2. This is due to lacking mishandling the use of user IDs that is accessible by the visitor. This makes it possible for unauthenticated or authenticated attackers to access the information and privileges of other users, including 'guest users', in their own category (authenticated, or unauthenticated guests).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-4344?
CVE-2021-4344 is a vulnerability in the Frontend File Manager plugin for WordPress that allows for privilege escalation.
What is the severity of CVE-2021-4344?
The severity of CVE-2021-4344 is medium with a CVSS score of 5.4.
How does CVE-2021-4344 affect the Frontend File Manager plugin for WordPress?
CVE-2021-4344 affects versions up to and including 18.2 of the Frontend File Manager plugin for WordPress.
How can an attacker exploit CVE-2021-4344?
An attacker can exploit CVE-2021-4344 to gain unauthorized access to the affected WordPress site and perform privilege escalation.
Is there a fix for CVE-2021-4344?
Yes, a fix is available for CVE-2021-4344. Users should update to the latest version of the Frontend File Manager plugin for WordPress.