CVE-2021-4368 | The Frontend File Manager plugin for WordPress is vulnerable… | CVSS 9.9 CRITICAL

Description

The Frontend File Manager plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 18.2. This is due to lacking capability checks and a security nonce, all on the wpfm_save_settings AJAX action. This makes it possible for subscriber-level attackers to edit the plugin settings, such as the allowed upload file types. This can lead to remote code execution through other vulnerabilities.

Metadata

CVE ID: CVE-2021-4368
State: PUBLISHED
Assigner: Wordfence
Reserved: 2023-06-06 13:09 UTC
Published: 2023-06-07 01:51 UTC
Last updated: 2026-04-08 17:15 UTC
Primary CWE: CWE-862
CWE-862 Missing Authorization
Vendor / Product: nmedia / Frontend File Manager Plugin
Sources: cve.org · NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
nmedia	Frontend File Manager Plugin	—	0 < 18.3

Weakness (CWE)

CWE	Source	Description
CWE-862	cna	CWE-862 Missing Authorization

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References (3)