WordPress Plugin Vulnerabilities

N-Media File Uploader < 3.5 Arbitrary File Upload

Description

The Frontend File Manager Plugin WordPress plugin was affected by security vulnerability.

Affects Plugins

Plugin icon
nmedia-user-file-uploader
Fixed in 3.5

References

CVE
CVE-2014-5324
URL
https://jvn.jp/en/jp/JVN87863382/index.html

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
973efe89-59b7-46da-8e41-0de0158e5124

Timeline

Publicly Published
2014-09-28 (about 11 years ago)
Added
2014-09-28 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2022-04-11
Title
Import WP < 2.4.6 - Admin+ Arbitrary File Upload to RCE
Published
2025-06-09
Title
Abandoned Cart Pro for WooCommerce < 9.17.0 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2025-04-18
Title
AIHub < 1.3.8 - Unauthenticated Arbitrary File Upload in generate_image
Published
2024-11-08
Title
WooCommerce Support Ticket System < 17.8 - Unauthenticated Arbitrary File Upload
Published
2014-08-01
Title
Mac Photo Gallery - upload-file.php File Upload