Skip to content

Nmedia vulnerabilities

Products

Newest

nmedia frontend file manager plugin Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion CVE-2026-8095 8.1 HighJune 27, 2026
nmedia frontend file manager plugin Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter CVE-2026-1280 7.5 HighJanuary 28, 2026
nmedia simple user registration Simple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field CVE-2026-0844 8.8 HighJanuary 28, 2026
nmedia frontend file manager plugin Frontend File Manager Plugin <= 23.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming CVE-2025-13382 4.3 MediumNovember 25, 2025
nmedia admin and customer messages after order for woocommerce: orderconvo Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure CVE-2025-13389 5.3 MediumNovember 25, 2025
nmedia admin and customer messages after order for woocommerce: orderconvo Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated User Impersonation in Order Messages CVE-2025-13452 4.3 MediumNovember 25, 2025
nmedia simple user registration Simple User Registration <= 6.6 - Unauthenticated Stored Cross-Site Scripting CVE-2025-12160 7.2 HighNovember 21, 2025
n-media simple user registration WordPress Simple User Registration plugin <= 6.8 - Privilege Escalation vulnerability CVE-2025-53428 8.8 HighOctober 22, 2025
nmedia admin and customer messages after order for woocommerce: orderconvo OrderConvo <= 15.1 - Unauthenticated Arbitrary File Read CVE-2025-10162 Public exploit 8.6 HighOctober 7, 2025
nmedia frontend file manager plugin Frontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CVE-2023-7306 7.5 HighJuly 25, 2025
nmedia simple user registration, najeebmedia memberhero +1 more Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation CVE-2025-4334 Public exploit 9.8 CriticalJune 26, 2025
najeebmedia easy quiz maker Easy Quiz Maker <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13456 6.4 MediumFebruary 12, 2025
nmedia gohero store customizer for woocommerce GoHero Store Customizer for WooCommerce <= 3.5 - Missing Authorization to Unuthenticated Settings Update CVE-2024-12826 4.3 MediumJanuary 25, 2025
nmedia admin and customer messages after order for woocommerce: orderconvo Admin and Customer Messages After Order for WooCommerce <= 13.2 - Authenticated (Subscriber+) Limited File Upload to Cross-Site Scripting CVE-2024-13355 5.4 MediumJanuary 16, 2025
n-media simple user registration WordPress Simple User Registration plugin <= 5.5 - Broken Access Control on User Deletion vulnerability CVE-2024-53810 9.1 CriticalDecember 6, 2024
n-media simple user registration, najeebmedia memberhero +1 more WordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability CVE-2024-49604 9.8 CriticalOctober 20, 2024
najeebmedia frontend file manager, n-media post front-end form, post front-end form +1 more +3 more Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload CVE-2016-15042 Public exploit 9.8 CriticalOctober 16, 2024
nmedia 2checkout payment gateway for woocommerce, 2checkout payment gateway +1 more 2Checkout Payment Gateway for WooCommerce <= 6.2 - Missing Authorization via sniff_ins CVE-2024-0629 5.3 MediumMay 2, 2024
nmedia comments extra fields for post,pages and cpt, najeebmedia comments extra fields for post\, pages and cpt +1 more Comments Extra Fields For Post,Pages and CPT <= 5.0 - Missing Authorization CVE-2024-0829 4.3 MediumMarch 13, 2024
nmedia comments extra fields for post,pages and cpt, najeebmedia comments extra fields for post\, pages and cpt +1 more Comments Extra Fields For Post,Pages and CPT <= 5.0 - Cross-Site Request Forgery CVE-2024-0830 4.3 MediumMarch 13, 2024
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Content Injection CVE-2021-4369 5.8 MediumJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File Upload CVE-2021-4368 9.9 CriticalJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Stored Cross-Site Scripting CVE-2021-4365 7.2 HighJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager Plugin <= 18.2 - Unauthenticated Arbitrary Post Deletion CVE-2021-4359 6.5 MediumJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Arbitrary File Download CVE-2021-4356 9.0 CriticalJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change CVE-2021-4351 5.8 MediumJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam Emails CVE-2021-4350 7.2 HighJune 7, 2023
najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Privilege Escalation CVE-2021-4344 6.4 MediumJune 7, 2023
nmedia member conversation Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin... CVE-2012-3577 Public exploit EPSS 13.5% 7.5 HighJune 17, 2012