title: Frontend File Manager < 22.6 - Editor+ Arbitrary File Download
description: The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as `wp-config.php`
problem types: CWE-200 Information Exposure
affected:
{
vendor: Unknown
product: Frontend File Manager Plugin
versions:
status: affected, versionType: semver, version: 0, lessThan: 22.6
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}