1. Home
  2. CVE Database
  3. CVE-2022-3126
MEDIUM · 4.3

CVE-2022-3126

The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf

Vulnerability Description

The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
NajeebmediaFrontend File Manager Plugin< 21.4

Related Weaknesses (CWE)

CWE-352

References

FAQ

What is CVE-2022-3126?

CVE-2022-3126 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf

How severe is CVE-2022-3126?

CVE-2022-3126 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-3126?

Check the references section above for vendor advisories and patch information. Affected products include: Najeebmedia Frontend File Manager Plugin.