Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Najeebmedia Component: Frontend File Manager Clear all filters
TI-2016-09162 CVE-2016-15042 · GHSA-98v8-mh4j-wqg7

Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload

Priority HIGH 82

The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_f…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06684 Published 2024-10-16 Fixed in 4.0 CWE-434
TI-2022-02884 CVE-2022-3125 · GHSA-q6gp-rjmw-h7qw

Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload

Priority MEDIUM 41

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to uploa…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01643 Published 2022-10-03 Fixed in 21.3 CWE-434
TI-2022-02883 CVE-2022-3124 · GHSA-wvhv-jqpm-79vj

Frontend File Manager < 21.3 - Unauthenticated File Renaming

Priority LOW 35

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08263 Published 2022-10-03 Fixed in 21.3 CWE-862