CVE-2021-4369 describes an Unauthenticated Content Injection vulnerability in the Frontend File Manager plugin for WordPress, affecting versions up to and including 18.2. This flaw stems from insufficient authorization checks, allowing unauthenticated attackers to modify the titles and content of any page on a WordPress site. With a CVSS score of 5.3 (Medium), this vulnerability has a low attack complexity and can be exploited over the network without user interaction, leading to unauthorized content modification. There is currently no public exploit code available, nor is it listed on the KEV catalog, and it has received no significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 18.2CPE matchmatch criteria | cpe:2.3:a:najeebmedia:frontend_file_manager_plugin:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.