CVE-2022-3126: Frontend File Manager < 21.4 - File Upload via CSRF
Published Oct 17, 2022
·Updated
The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf
Affected Software
1 affected component
Najeebmedia Frontend File Manager Plugin Wordpress<21.4
Event History
Oct 17, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2022-3126?
CVE-2022-3126 is a vulnerability in the Frontend File Manager Plugin WordPress plugin before version 21.4 that allows logged in users to upload files on behalf of others.
2
How severe is CVE-2022-3126?
CVE-2022-3126 has a severity score of 4.3, which is considered medium.
3
How does CVE-2022-3126 affect Najeebmedia Frontend File Manager Plugin?
CVE-2022-3126 affects the Najeebmedia Frontend File Manager Plugin version up to 21.4.
4
Is there a CSRF check in the Frontend File Manager Plugin?
No, the Frontend File Manager Plugin before version 21.4 does not have a CSRF check when uploading files.
5
How can attackers exploit CVE-2022-3126?
Attackers can exploit CVE-2022-3126 by making logged in users upload files on their behalf.