WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
nmedia-user-file-uploader
Published
2015-06-29
Title
N-Media File Uploader <= 3.7 - Unauthenticated Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2016-09-19
Title
Front end file upload and manager Plugin < 4.0 - Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Privilege Escalation
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Unauthenticated Content Injection and Stored XSS
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Authenticated Arbitrary Settings Change to Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Unauthenticated Arbitrary Post Deletion
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Unauthenticated Post Meta Change to Arbitrary File Download
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Unauthenticated HTML Injection
Slug
nmedia-user-file-uploader
Published
2022-09-07
Title
Frontend File Manager < 21.3 - Unauthenticated File Renaming
Slug
nmedia-user-file-uploader
Published
2022-09-07
Title
Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2022-09-26
Title
Frontend File Manager < 21.4 - File Upload via CSRF
Slug
nmedia-user-file-uploader
Published
2022-09-26
Title
Frontend File Manager < 21.4 - Arbitrary Settings Update via CSRF
Slug
nmedia-user-file-uploader
Published
2023-11-13
Title
Frontend File Manager < 22.7 - Editor+ Arbitrary File Download
Slug
nmedia-user-file-uploader
Published
2024-02-12
Title
Frontend File Manager < 22.8 - Sensitive Information Exposure via user uploads
Slug
nmedia-user-file-uploader
Published
2025-07-04
Title
Frontend File Manager <= 23.2 - Missing Authorization to Authenticated (Subscriber+) Content Injection
Slug
nmedia-user-file-uploader
Published
2025-07-24
Title
Frontend File Manager < 22.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
nmedia-user-file-uploader
Published
2025-09-22
Title
Frontend File Manager < 23.4 - Missing Authorization
Slug
nmedia-user-file-uploader
Published
2025-10-30
Title
Frontend File Manager < 23.3 - Missing Authorization
Slug
nmedia-user-file-uploader
Published
2025-11-24
Title
Frontend File Manager Plugin < 23.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming
Slug
nmedia-user-file-uploader
Published
2025-12-17
Title
Frontend File Manager < 23.5 - Subscriber+ Arbitrary File Deletion
Slug
nmedia-user-file-uploader
Published
2026-01-27
Title
Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending
Slug
nmedia-user-file-uploader
Published
2026-01-27
Title
Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter
Slug
nmedia-user-file-uploader
Published
2026-04-11
Title
Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOR
Slug
nmr-strava-activities
Published
2024-10-31
Title
NMR Strava activities < 1.0.8 - Contributor+ Stored XSS
Slug
no-api-amazon-affiliate
Published
2023-01-13
Title
No API Amazon Affiliate < 4.4.0 - Admin+ Stored XSS