CVE-2023-5105

Description

The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as `wp-config.php`

Affected products

• Unknown / Frontend File Manager Plugin0 – 22.6

References

• MISChttps://wpscan.com/vulnerability/d40c7108-bad6-4ed3-8539-35c0f57e62cc