CVE-2023-5105 | BDVDB-2026-218217 Detail

Frontend File Manager Plugin

Description#

The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as `wp-config.php`

Impact#

No impact statement in the source data.

Weaknesses#

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References#

https://wpscan.com/vulnerability/d40c7108-bad6-4ed3-8539-35c0f57e62cc

Exploit#

https://wpscan.com/vulnerability/d40c7108-bad6-4ed3-8539-35c0f57e62cc

History#

Version 12023-12-04Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.