CVE-2021-4356: Frontend File Manager <= 18.2 - Unauthenticated Arbitrary File Download

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2021-4356.

Q: What is the severity level of CVE-2021-4356?

The severity level of CVE-2021-4356 is critical with a severity value of 9.8.

Q: Which software is affected by CVE-2021-4356?

The Frontend File Manager plugin for WordPress is affected by CVE-2021-4356.

Q: What is the cause of CVE-2021-4356?

The cause of CVE-2021-4356 is lacking authentication protections, capability checks, and sanitization on the wpfm_file_meta_update AJAX action in the Frontend File Manager plugin for WordPress.

Q: How can I fix CVE-2021-4356?

To fix CVE-2021-4356, update to a version of the Frontend File Manager plugin for WordPress that is higher than 18.2.

Published Jun 7, 2023

Updated

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Download in versions up to, and including, 18.2. This is due to lacking authentication protections, capability checks, and sanitization, all on the wpfmfilemetaupdate AJAX action. This makes it possible for unauthenticated attackers to download arbitrary files on the site, potentially leading to site takeover.

Affected Software

1 affected component

Najeebmedia Frontend File Manager Plugin Wordpress<=18.2

Remediation

Patch Available

https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2554359%40nmedia-user-file-uploader&new=2554359%40nmedia-user-file-uploader&sfp_email=&sfph_mail=

Event History

Jun 7, 2023

CVE Published

via MITRE·01:51 AM

Data Sourced

via MITRE·01:51 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2021-4356.

What is the severity level of CVE-2021-4356?