WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
nix-anti-spam-light
Published
2025-09-22
Title
NIX Anti-Spam Light <= 0.0.4 - Cross-Site Request Forgery
Slug
nk-themes-helper
Published
2026-01-08
Title
nK Themes Helper <= 1.7.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
nktagcloud
Published
2022-07-18
Title
Better Tag Cloud <= 0.99.5 - Admin+ Stored Cross-Site Scripting
Slug
nlinks
Published
2017-11-22
Title
InLinks 1.0 - Authenticated SQL Injection
Slug
nm-visitors
Published
2024-09-25
Title
WordPress Visitors <= 1.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Header
Slug
nmedia-mailchimp-widget
Published
2014-08-01
Title
Nmedia MailChimp 3.1 - api_mailchimp/postToMailChimp.php abs_path Parameter XSS
Slug
nmedia-mailchimp-widget
Published
2025-03-27
Title
Nmedia MailChimp <= 5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
nmedia-user-file-uploader
Published
2014-08-01
Title
N-Media File Uploader < 2.0 Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2014-09-28
Title
N-Media File Uploader < 3.5 Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2015-06-10
Title
N-Media File Uploader <= 3.7 - Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2015-06-29
Title
N-Media File Uploader <= 3.7 - Unauthenticated Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2016-09-19
Title
Front end file upload and manager Plugin < 4.0 - Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Privilege Escalation
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Unauthenticated Content Injection and Stored XSS
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Authenticated Arbitrary Settings Change to Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Unauthenticated Arbitrary Post Deletion
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Unauthenticated Post Meta Change to Arbitrary File Download
Slug
nmedia-user-file-uploader
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Unauthenticated HTML Injection
Slug
nmedia-user-file-uploader
Published
2022-09-07
Title
Frontend File Manager < 21.3 - Unauthenticated File Renaming
Slug
nmedia-user-file-uploader
Published
2022-09-07
Title
Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2022-09-26
Title
Frontend File Manager < 21.4 - File Upload via CSRF
Slug
nmedia-user-file-uploader
Published
2022-09-26
Title
Frontend File Manager < 21.4 - Arbitrary Settings Update via CSRF
Slug
nmedia-user-file-uploader
Published
2023-11-13
Title
Frontend File Manager < 22.7 - Editor+ Arbitrary File Download
Slug
nmedia-user-file-uploader
Published
2024-02-12
Title
Frontend File Manager < 22.8 - Sensitive Information Exposure via user uploads
Slug
nmedia-user-file-uploader
Published
2025-07-04
Title
Frontend File Manager <= 23.2 - Missing Authorization to Authenticated (Subscriber+) Content Injection