Description (CNA)
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Frontend File Manager Plugin | affected 21.3 before 21.3 |
CWE
CWE-434
References
ADP enrichment
No English description supplied.