Description
The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the site without any security checks. This lets attackers use the WordPress site as an open relay for spam or phishing emails to anyone. Attackers can also guess file IDs to access and share uploaded files without permission, exposing sensitive information.
INFO
Published Date :
2026-02-17T06:00:06.506Z
Last Modified :
2026-04-02T12:39:56.676Z
Source :
WPScan
AFFECTED PRODUCTS
The following products are affected by CVE-2026-0829 vulnerability.
| Vendors | Products |
|---|---|
| Frontend File Manager Plugin |
|
| Wordpress |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-0829.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact