CVE-2022-3126: Najeebmedia Frontend File Manager Plugin

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf

Affected products

• Najeebmedia Frontend File Manager Plugin: before 21.4 (fixed in 21.4)

Published 2022-10-17. Last modified 2026-06-17.