Skip to content

Najeebmedia vulnerabilities

Products

Newest

n-media website contact form with file upload Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload CVE-2015-10137 Public exploit 9.8 CriticalJuly 22, 2025
nmedia simple user registration, najeebmedia memberhero +1 more Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation CVE-2025-4334 Public exploit 9.8 CriticalJune 26, 2025
najeebmedia easy quiz maker Easy Quiz Maker <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13456 6.4 MediumFebruary 12, 2025
n-media simple user registration, najeebmedia memberhero +1 more WordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability CVE-2024-49604 9.8 CriticalOctober 20, 2024
najeebmedia frontend file manager, n-media post front-end form, post front-end form +1 more +3 more Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload CVE-2016-15042 Public exploit 9.8 CriticalOctober 16, 2024
n-media frontend file manager WordPress Frontend File Manager Plugin plugin <= 22.7 - Sensitive Data Exposure vulnerability CVE-2024-25903 5.3 MediumMarch 17, 2024
nmedia comments extra fields for post,pages and cpt, najeebmedia comments extra fields for post\, pages and cpt +1 more Comments Extra Fields For Post,Pages and CPT <= 5.0 - Missing Authorization CVE-2024-0829 4.3 MediumMarch 13, 2024
nmedia comments extra fields for post,pages and cpt, najeebmedia comments extra fields for post\, pages and cpt +1 more Comments Extra Fields For Post,Pages and CPT <= 5.0 - Cross-Site Request Forgery CVE-2024-0830 4.3 MediumMarch 13, 2024
najeebmedia frontend file manager plugin Frontend File Manager < 22.6 - Editor+ Arbitrary File Download CVE-2023-5105 6.5 MediumDecember 4, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Content Injection CVE-2021-4369 5.8 MediumJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File Upload CVE-2021-4368 9.9 CriticalJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Stored Cross-Site Scripting CVE-2021-4365 7.2 HighJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager Plugin <= 18.2 - Unauthenticated Arbitrary Post Deletion CVE-2021-4359 6.5 MediumJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Arbitrary File Download CVE-2021-4356 9.0 CriticalJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change CVE-2021-4351 5.8 MediumJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam Emails CVE-2021-4350 7.2 HighJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Privilege Escalation CVE-2021-4344 6.4 MediumJune 7, 2023
najeebmedia woocommerce checkout field manager WooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File Upload CVE-2022-4328 9.8 CriticalMarch 6, 2023
najeebmedia frontend file manager plugin Frontend File Manager < 21.4 - File Upload via CSRF CVE-2022-3126 4.3 MediumOctober 17, 2022
najeebmedia frontend file manager, unknown frontend file manager plugin +1 more Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload CVE-2022-3125 8.8 HighOctober 3, 2022
najeebmedia frontend file manager, unknown frontend file manager plugin +1 more Frontend File Manager < 21.3 - Unauthenticated File Renaming CVE-2022-3124 5.3 MediumOctober 3, 2022
najeebmedia wordpress comments fields WP Comments Fields < 4.1 - Admin+ Stored Cross-Site Scripting CVE-2022-2398 4.8 MediumAugust 8, 2022
najeebmedia ppom for woocommerce PPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSS CVE-2021-25018 5.4 MediumFebruary 14, 2022
najeebmedia ppom for woocommerce The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new... CVE-2019-14948 5.4 MediumAugust 12, 2019
n-media personalized woocommerce cart page Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and... CVE-2019-5979 8.8 HighJuly 5, 2019
najeebmedia n-media file uploader Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for... CVE-2014-5324 6.5 MediumSeptember 26, 2014