WordPress Plugin Vulnerabilities

N-Media File Uploader <= 3.7 - Arbitrary File Upload

Description

The Frontend File Manager Plugin WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
nmedia-user-file-uploader
Fixed in 3.8

References

URL
https://seclists.org/oss-sec/2015/q2/676

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
e5a15d37-d50a-4774-9ba0-b497779c2dd3

Timeline

Publicly Published
2015-06-10 (about 10 years ago)
Added
2015-06-11 (about 10 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-12-11
Title
Infility Global < 2.14.43 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2024-12-02
Title
Revy <= 1.18 - Unauthenticated Arbitrary File Upload
Published
2014-08-01
Title
Sitemile Auctions 2.0.1.3 - wp-content/plugins/auctionPlugin/upload.php File Upload PHP Code Execution
Published
2023-11-14
Title
Slider Revolution < 6.6.16 - Authenticated (Author+) Arbitrary File Upload
Published
2025-01-03
Title
Fancy Product Designer < 6.4.4 - Unauthenticated Arbitrary File Upload