VULNERABILITY INTELLIGENCE

CVE-2022-3126

CVSS score4.3 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2022-10-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf

Weakness classification

  • contact@wpscan.com: CWE-352

Primary references