Security Advisory

CVE-2026-8379

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-23 06:00:02

Last updated 2026-06-23 13:23:57

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly enforce its nonce check on the file download handler, allowing unauthenticated attackers to download files uploaded by any user through the Frontend File Manager Plugin WordPress plugin through 23.6 by iterating identifiers.

← Browse all CVEs View on cve.org ↗