What’s Vulnerable › Products
Frontend File Manager Plugin vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Check whether your Frontend File Manager Plugin version is affected
Latest Frontend File Manager Plugin vulnerabilities
- CVE-2026-32577 — WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-16292 — Frontend File Manager Plugin <= 23.6 - File Metadata Update via CSRF (CVSS 5.4)
- CVE-2026-12277 — Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Deletion via Saved File Metadata Path Traversal (CVSS 8.7)
- CVE-2026-8380 — Frontend File Manager Plugin <= 23.6 - Author+ Arbitrary Post Deletion (CVSS 6.5)
- CVE-2026-8379 — Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Download (CVSS 7.5)
- CVE-2026-8378 — Frontend File Manager Plugin <= 23.6 - Subscriber+ Stored Cross-Site Scripting via File Rename (CVSS 5.4)
- CVE-2026-5337 — Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOR (CVSS 6.5)
- CVE-2026-25005 — WordPress Frontend File Manager plugin <= 23.5 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3)
- CVE-2026-0829 — Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending (CVSS 5.8)
- CVE-2025-14804 — Frontend File Manager < 23.5 - Subscriber+ Arbitrary File Deletion (CVSS 7.7)
- CVE-2025-64265 — WordPress Frontend File Manager plugin <= 23.2 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2025-57921 — WordPress Frontend File Manager plugin <= 23.3 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2025-27358 — WordPress Frontend File Manager plugin <= 23.6 - Content Injection vulnerability (CVSS 4.6)
- CVE-2016-15042 — Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload (CVSS 9.8)
- CVE-2024-25903 — WordPress Frontend File Manager Plugin plugin <= 22.7 - Sensitive Data Exposure vulnerability (CVSS 7.5)
- CVE-2022-3125 — Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload (CVSS 8.8)
- CVE-2022-3124 — Frontend File Manager < 21.3 - Unauthenticated File Renaming (CVSS 5.3)