CVE-2021-4368

The Frontend File Manager plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 18.2. This is due to lacking capability checks and a security nonce, all on the wpfm_save_settings AJAX action. This makes it possible for subscriber-level attackers to edit the plugin settings, such as the allowed upload file types. This can lead to remote code execution through other vulnerabilities.

• CWE-862
• CWE-862

• https://blog.nintechnet.com/wordpress-frontend-file-manager-plugin-fixed-multiple-critical-vulnerabilities/Exploit
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2554359%40nmedia-user-file-uploader&new=2554359%40nmedia-user-file-uploader&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/adb1d8b0-b1d6-40df-b591-f1062ee744fb?source=cveThird Party Advisory
• https://blog.nintechnet.com/wordpress-frontend-file-manager-plugin-fixed-multiple-critical-vulnerabilities/Exploit
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2554359%40nmedia-user-file-uploader&new=2554359%40nmedia-user-file-uploader&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/adb1d8b0-b1d6-40df-b591-f1062ee744fb?source=cveThird Party Advisory

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43674ThinkUp 2.0-beta.10 is affected by a path manipulation vulne…9.8
• CVE-2021-43675Lychee-v3 3.2.16 is affected by a Cross Site Scripting (XSS)…6.1
• CVE-2021-43676matyhtf framework v3.0.5 is affected by a path manipulation …9.8
• CVE-2021-43677Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) v…6.1
• CVE-2021-43678Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting…6.1
• CVE-2021-43679ecshop v2.7.3 is affected by a SQL injection vulnerability i…9.8
• CVE-2021-43681SakuraPanel v1.0.1.1 is affected by a Cross Site Scripting (…6.1
• CVE-2021-43682thinkphp-bjyblog (last update Jun 4 2021) is affected by a C…6.1
• CVE-2021-43683pictshare v1.5 is affected by a Cross Site Scripting (XSS) v…6.1
• CVE-2021-43685libretime hv3.0.0-alpha.10 is affected by a path manipulatio…9.8
• CVE-2021-43686nZEDb v0.4.20 is affected by a Cross Site Scripting (XSS) vu…6.1
• CVE-2021-43687chamilo-lms v1.11.14 is affected by a Cross Site Scripting (…6.1