WordPress Plugin Vulnerabilities

Front end file upload and manager Plugin < 4.0 - Arbitrary File Upload

Description

The Frontend File Manager Plugin WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
nmedia-user-file-uploader
Fixed in 4.0

References

URL
https://www.pluginvulnerabilities.com/2016/09/19/arbitrary-file-upload-vulnerability-in-front-end-file-upload-and-manager-plugin/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
052f7d9a-aaff-4fb1-92b7-aeb83cc705a7

Timeline

Publicly Published
2016-09-19 (about 7 years ago)
Added
2016-09-27 (about 7 years ago)
Last Updated
2019-11-01 (about 4 years ago)

Other

Published
Title
Published
2022-12-19
Title
WPtouch < 4.3.45 - Admin+ Arbitrary File Upload
Published
2023-07-14
Title
User Registration < 3.0.2.1 - Subscriber+ Arbitrary File Upload Leading to RCE
Published
2021-01-29
Title
Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE
Published
2014-08-01
Title
Ghost - Arbitrary File Upload
Published
2014-08-01
Title
Anthology - Remote File Upload