Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CVE-2022-3124 - medium 🚨 Frontend File Manager < 21.3 - Unauthenticated File Renaming > The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthentica... 👾 https://cloud.projectdiscovery.io/library/CVE-2022-3124 @pdnuclei #NucleiTemplates #cve
Post summary
The tweet announces CVE‑2022‑3124, describing that Frontend File Manager plugin versions prior to 21.3 allow unauthenticated file renaming.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | najeebmedia | frontend_file_manager | - | wordpress | - |