Frontend File Manager Plugin WordPress plugin through 23.5 contains an open relay and unauthorized file access vulnerability caused by lack of authentication and security checks, letting unauthenticated attackers send emails and access files, exploit requires no authentication. [已公开] id: CVE-2026-0829 info: name: Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending author: 0x_Akoko severity: high description: | Frontend File Manager Plugin WordPress plugin through 23.5 contains an open relay and unauthorized file access vulnerability caused by lack of authentication and security checks, letting unauthenticated attackers send emails and access files, exploit requires no authentication. impact: | Unauthenticated attackers can send spam emails and access sensitive uploaded files, leading to information disclosure and abuse of email functionality. remediation: | Update to the latest version beyond 23.5. reference: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e739e7d3-756a-4c93-9ca7-f7b9f9657033 - https://wpscan.com/vulnerability/57d62cea-cfb8-4421-a209-e64a015ad225/ - https://plugins.trac.wordpress.org/browser/nmedia-user-file-uploader/tags/23.5

未知