Najeebmedia

Records26All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Najeebmedia records in CISA KEV

No Najeebmedia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Frontend File Manager Plugin 10 records MEDIUM Frontend File Manager 4 records HIGH Comments Extra Fields For Post, Pages And Cpt 2 records LOW Memberhero 2 records MEDIUM Ppom For Woocommerce 2 records LOW Easy Quiz Maker 1 record LOW N-media File Uploader 1 record LOW Personalized Woocommerce Cart Page 1 record MEDIUM

Records

4 records in Frontend File Manager · all components

TI-2016-09162 CVE-2016-15042 · GHSA-98v8-mh4j-wqg7

Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload

HIGH 82

The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_f…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06684 Published 2024-10-16 Fixed in 4.0 CWE-434

TI-2022-02884 CVE-2022-3125 · GHSA-q6gp-rjmw-h7qw

Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload

MEDIUM 41

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to uploa…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01643 Published 2022-10-03 Fixed in 21.3 CWE-434

TI-2024-17003 CVE-2024-25903 · GHSA-pcmw-8m79-4286

WordPress Frontend File Manager Plugin plugin <= 22.7 - Sensitive Data Exposure vulnerability

LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a through 22.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00453 Published 2024-03-17 No fix listed CWE-200

TI-2022-02883 CVE-2022-3124 · GHSA-wvhv-jqpm-79vj

Frontend File Manager < 21.3 - Unauthenticated File Renaming

LOW 35

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08263 Published 2022-10-03 Fixed in 21.3 CWE-862

Open these records in search →

Critical	7
High	5
Medium	14
Low	0
No CVSS	0