Security
فارسی
All products

nmedia-user-file-uploader

WordPress · Plugin
34 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File DeletionCVE-2026-8095 nmedia-user-file-uploader WordPress High No fix reported
Frontend File Manager Plugin <= 23.6 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-32577 nmedia-user-file-uploader WordPress High No fix reported
Frontend File Manager <= 23.6 - Missing Authorization to Authenticated (Author+) Arbitrary Post DeletionCVE-2026-8380 nmedia-user-file-uploader WordPress Medium No fix reported
Frontend File Manager <= 23.6 - Unauthenticated Arbitrary File DeletionCVE-2026-12277 nmedia-user-file-uploader WordPress Critical No fix reported
Frontend File Manager Plugin <= 23.6 - Cross-Site Request ForgeryCVE-2026-16292 nmedia-user-file-uploader WordPress Medium No fix reported
Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' ParameterCVE-2026-1280 nmedia-user-file-uploader WordPress High Fix reported
Frontend File Manager Plugin <= 23.6 - Missing Authorization to Unauthenticated File DownloadCVE-2026-8379 nmedia-user-file-uploader WordPress Medium No fix reported
Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-8378 nmedia-user-file-uploader WordPress Medium No fix reported
Frontend File Manager <= 23.2 - Missing Authorization to Authenticated (Subscriber+) Content InjectionCVE-2025-27358 nmedia-user-file-uploader WordPress Medium No fix reported
Frontend File Manager <= 23.5 - Missing AuthorizationCVE-2026-0829 nmedia-user-file-uploader WordPress Medium No fix reported
Frontend File Manager <= 23.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Download AccessCVE-2026-5337 nmedia-user-file-uploader WordPress Medium No fix reported
Frontend File Manager Plugin <= 23.5 - Unauthenticated Insecure Direct Object ReferenceCVE-2026-25005 nmedia-user-file-uploader WordPress Medium Fix reported
Frontend File Manager <= 23.4 - Authenticated (Subscriber+) Arbitrary File DeletionCVE-2025-14804 nmedia-user-file-uploader WordPress High Fix reported
Frontend File Manager Plugin <= 23.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File RenamingCVE-2025-13382 nmedia-user-file-uploader WordPress Medium Fix reported
Frontend File Manager <= 23.2 - Missing AuthorizationCVE-2025-57921 nmedia-user-file-uploader WordPress Medium Fix reported
Frontend File Manager <= 23.2 - Missing AuthorizationCVE-2025-64265 nmedia-user-file-uploader WordPress Medium Fix reported
Frontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post DeletionCVE-2023-7306 nmedia-user-file-uploader WordPress High Fix reported
Frontend File Manager <= 21.2 - Missing AuthorizationCVE-2022-3124 nmedia-user-file-uploader WordPress Medium Fix reported
Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File UploadCVE-2016-15042 nmedia-user-file-uploaderwp-post-frontend WordPress Critical Fix reported
Frontend File Manager <= 22.7 - Sensitive Information Exposure via user uploadsCVE-2024-25903 nmedia-user-file-uploader WordPress Medium Fix reported