A vulnerability was found in Frontend File Manager Plugin up to 21.5 on WordPress and classified as critical. Affected by this issue is the function
wpfm_delete_multiple_files
. The manipulation leads to missing authentication.
This vulnerability is handled as CVE-2023-7306. The attack may be launched remotely. There is no exploit available.