PT-2023-12448 · WordPress · Frontend File Manager
CVSS v3.1
6.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Frontend File Manager plugin for WordPress versions up to, and including, 18.2
Description
The issue is related to a lack of proper handling of user IDs, making it accessible to visitors. This allows unauthenticated or authenticated attackers to access information and privileges of other users, including guest users, within their own category.
Recommendations
For versions up to, and including, 18.2, update to a version higher than 18.2 to resolve the issue.
Exploit
Correção
Improper Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Frontend File Manager