Skip to contentNmedia Frontend File Manager Plugin vulnerabilities
- nmedia frontend file manager pluginFrontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File DeletionCVE-2026-80958.1 High
- nmedia frontend file manager pluginFrontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' ParameterCVE-2026-12807.5 High
- nmedia frontend file manager pluginFrontend File Manager Plugin <= 23.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File RenamingCVE-2025-133824.3 Medium
- nmedia frontend file manager pluginFrontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post DeletionCVE-2023-73067.5 High
- najeebmedia frontend file manager, n-media post front-end form, post front-end form +1 more +3 moreFrontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File UploadCVE-2016-15042Public exploit9.8 Critical
- najeebmedia frontend file manager pluginFrontend File Manager <= 18.2 - Unauthenticated Content InjectionCVE-2021-43695.8 Medium
- najeebmedia frontend file manager pluginFrontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File UploadCVE-2021-43689.9 Critical
- najeebmedia frontend file manager pluginFrontend File Manager <= 18.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2021-43657.2 High
- najeebmedia frontend file manager pluginFrontend File Manager Plugin <= 18.2 - Unauthenticated Arbitrary Post DeletionCVE-2021-43596.5 Medium
- najeebmedia frontend file manager pluginFrontend File Manager <= 18.2 - Unauthenticated Arbitrary File DownloadCVE-2021-43569.0 Critical
- najeebmedia frontend file manager pluginFrontend File Manager <= 18.2 - Unauthenticated Post Meta ChangeCVE-2021-43515.8 Medium
- najeebmedia frontend file manager pluginFrontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam EmailsCVE-2021-43507.2 High
- najeebmedia frontend file manager pluginFrontend File Manager <= 18.2 - Privilege EscalationCVE-2021-43446.4 Medium