CVE-2021-4368: Frontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File Upload
The Frontend File Manager plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 18.2. This is due to lacking capability checks and a security nonce, all on the wpfmsavesettings AJAX action. This makes it possible for subscriber-level attackers to edit the plugin settings, such as the allowed upload file types. This can lead to remote code execution through other vulnerabilities.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-4368?
CVE-2021-4368 is a vulnerability in the Frontend File Manager plugin for WordPress that allows subscriber-level attackers to change settings without proper authorization.
What is the severity of CVE-2021-4368?
CVE-2021-4368 has a severity rating of 8.8, which is considered critical.
How does CVE-2021-4368 affect the Frontend File Manager plugin?
CVE-2021-4368 affects versions up to and including 18.2 of the Frontend File Manager plugin for WordPress.
How can subscriber-level attackers exploit CVE-2021-4368?
Subscriber-level attackers can exploit CVE-2021-4368 by using the wpfm_save_settings AJAX action to change settings without proper authorization.
Are there any fixes or patches available for CVE-2021-4368?
Yes, there are fixes available for CVE-2021-4368. You can find more information and updates in the provided references.