CVE-2022-3124

5.3 mediumEPSS 8.3%

Medium (5.3) in najeebmedia frontend file manager. EPSS 8.3% chance of exploitation in the next 30 days.

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 8.3% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2022-10-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

najeebmedia:frontend_file_manager

References

https://wpscan.com/vulnerability/00f76765-95af-4dbc-8c37-f1b15a0e8608
https://wpscan.com/vulnerability/00f76765-95af-4dbc-8c37-f1b15a0e8608

Check your stack JSON