CVE-2026-8379

Name of the Vulnerable Software and Affected Versions Frontend File Manager Plugin versions prior to 23.7

Description An issue exists where the file download handler does not properly enforce its nonce check. A nonce (number used once) is a security token used to prevent cross-site request forgery. This flaw allows unauthenticated attackers to download files uploaded by any user by iterating identifiers.

Recommendations Update the plugin to a version newer than 23.6.