Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 34
Reset filtersFrontend File Manager <= 23.6 - Unauthenticated Arbitrary File Deletion
Frontend File Manager Plugin <= 23.6 - Cross-Site Request Forgery
Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion
Frontend File Manager Plugin <= 23.6 - Missing Authorization to Unauthenticated File Download
Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Frontend File Manager <= 23.6 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion
Frontend File Manager <= 23.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Download Access
Frontend File Manager <= 23.5 - Missing Authorization
Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter
Frontend File Manager Plugin <= 23.5 - Unauthenticated Insecure Direct Object Reference
Frontend File Manager <= 23.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Frontend File Manager Plugin <= 23.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming
Frontend File Manager <= 23.2 - Missing Authorization
Frontend File Manager <= 23.2 - Missing Authorization
Frontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Frontend File Manager <= 23.2 - Missing Authorization to Authenticated (Subscriber+) Content Injection
Frontend File Manager <= 22.7 - Sensitive Information Exposure via user uploads
Frontend File Manager Plugin <= 22.5 - Authenticated (Editor+) Directory Traversal
Frontend File Manager Plugin <= 21.2 - Cross-Site Request Forgery to File Upload
Frontend File Manager <= 21.2 - Missing Authorization
Frontend File Manager <= 21.2 - Authenticated (Subscriber+) Arbitrary File Upload
Frontend File Manager <= 21.3 - Cross-Site Request Forgery to Plugin Settings Update
Frontend File Manager <= 18.2 - Unauthenticated Content Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.