CVE Explorer

CVE-2026-5337

During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure Direct Object Reference (IDOR) attack. This vulnerability exists because the Frontend File Manager Plugin WordPress plugin through 23.6 does not properly validate user authorization for the requested uploaded file when processing download requests. By modifying the value of the 'file_id' parameter in the download endpoint (e.g., http://localhost/?do=wpfm_down

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c4a36c959cf849354c3fab0ffda5d0f60bd0b60fd5bf8f3aa49862313f1430a2

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

cwe · 2 assertions

{"cweId":"CWE-639","description":"CWE-639 Authorization Bypass Through User-Controlled Key","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:02f5dbe2e59128b39a387fc07bbc9af7b2def0367afadcaf447bbacb39549336 · sha256:b0c7d811d0eb7e99… · /containers/adp/0/problemTypes/0/descriptions/0

{"description":"CWE-639 Authorization Bypass Through User-Controlled Key","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:02f5dbe2e59128b39a387fc07bbc9af7b2def0367afadcaf447bbacb39549336 · sha256:b0c7d811d0eb7e99… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

1 source assertion

{"defaultStatus":"unknown","product":"Frontend File Manager Plugin","vendor":"Unknown","versions":[{"lessThanOrEqual":"23.6","status":"affected","version":"0","versionType":"semver"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:02f5dbe2e59128b39a387fc07bbc9af7b2def0367afadcaf447bbacb39549336 · sha256:b0c7d811d0eb7e99… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:02f5dbe2e59128b39a387fc07bbc9af7b2def0367afadcaf447bbacb39549336 · sha256:b0c7d811d0eb7e99… · /containers/adp/0/metrics/0/cvssV3_1

CWE assertions

2 source assertions

{"cweId":"CWE-639","description":"CWE-639 Authorization Bypass Through User-Controlled Key","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:02f5dbe2e59128b39a387fc07bbc9af7b2def0367afadcaf447bbacb39549336 · sha256:b0c7d811d0eb7e99… · /containers/adp/0/problemTypes/0/descriptions/0

{"description":"CWE-639 Authorization Bypass Through User-Controlled Key","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:02f5dbe2e59128b39a387fc07bbc9af7b2def0367afadcaf447bbacb39549336 · sha256:b0c7d811d0eb7e99… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion

{"tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/3e28aa78-3227-474a-b1db-1f5ea2c42d14/"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:02f5dbe2e59128b39a387fc07bbc9af7b2def0367afadcaf447bbacb39549336 · sha256:b0c7d811d0eb7e99… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer