Skip to content
OpenAdvisories

Vendor

N-Media

39 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2015-10137 Public exploit

    Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload

    The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_file()' function in versions up to, and including, 1.3.4. This makes it possible for unauthenticated atta…

  • Critical 9.8
    CVE-2025-4334 Public exploit Scanner template

    Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

    The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible fo…

  • Critical 9.8
    CVE-2016-15042 Public exploit Scanner template

    Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload

    The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJA…