CVE-2022-2356
User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
HIGH 8.8EPSS 1.0%
The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead to malicious code being uploaded.
- Affected
- Frontend File Manager & Sharing – User Private Files
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 CNA
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - EPSS
- 1.00% chance of exploitation in the next 30 days, 62nd percentile
- Published
- 2022-08-08
- Updated
- 2026-06-23