← CVE Intelligence

CVE-2025-14804

Frontend File Manager < 23.5 - Subscriber+ Arbitrary File Deletion PUBLISHED

Description (CNA)

The Frontend File Manager Plugin WordPress plugin before 23.5 did not validate a path parameter and ownership of the file, allowing any authenticated users, such as subscribers to delete arbitrary files on the server

Affected (CNA)

Vendor / productVersions
Unknown / Frontend File Manager Pluginaffected 0 before 23.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.