N-media vulnerabilities

Products

• Frontend File Manager 6
• Simple User Registration 3
• Bulk Product Sync 2

Newest

• n-media frontend file manager WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-32577 7.1 HighOctober 6, 2026
• n-media frontend file manager WordPress Frontend File Manager plugin <= 23.5 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-25005 5.3 MediumFebruary 19, 2026
• n-media frontend file manager WordPress Frontend File Manager plugin <= 23.2 - Broken Access Control vulnerability CVE-2025-64265 4.3 MediumNovember 13, 2025
• n-media simple user registration WordPress Simple User Registration plugin <= 6.8 - Privilege Escalation vulnerability CVE-2025-53428 8.8 HighOctober 22, 2025
• n-media frontend file manager WordPress Frontend File Manager plugin <= 23.3 - Broken Access Control vulnerability CVE-2025-57921 5.3 MediumSeptember 22, 2025
• n-media website contact form with file upload Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload CVE-2015-10137 Public exploit 9.8 CriticalJuly 22, 2025
• n-media frontend file manager WordPress Frontend File Manager plugin <= 23.6 - Content Injection vulnerability CVE-2025-27358 4.6 MediumJuly 4, 2025
• n-media bulk product sync WordPress Bulk Product Sync plugin <= 8.6 - SQL Injection vulnerability CVE-2025-31599 9.3 CriticalApril 11, 2025
• n-media bulk product sync WordPress Bulk Product Sync plugin <= 8.6 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-31852 4.3 MediumApril 1, 2025
• n-media nmedia mailchimp WordPress Nmedia MailChimp plugin <= 5.4 - Cross Site Scripting (XSS) Vulnerability CVE-2025-30613 6.5 MediumApril 1, 2025
• n-media simple user registration WordPress Simple User Registration plugin <= 5.5 - Broken Access Control on User Deletion vulnerability CVE-2024-53810 9.1 CriticalDecember 6, 2024
• n-media simple user registration, najeebmedia memberhero +1 more WordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability CVE-2024-49604 9.8 CriticalOctober 20, 2024
• n-media orderconvo WordPress OrderConvo plugin <= 12.4 - Unauthenticated API Access to Arbitrary File Upload vulnerability CVE-2024-33566 10.0 CriticalApril 29, 2024
• n-media frontend file manager WordPress Frontend File Manager Plugin plugin <= 22.7 - Sensitive Data Exposure vulnerability CVE-2024-25903 5.3 MediumMarch 17, 2024
• n-media personalized woocommerce cart page Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and... CVE-2019-5979 8.8 HighJuly 5, 2019