Vulnerabilities and security researches fornmedia-user-file-uploader nmedia-user-file-uploader

Direction: ascending

Jun 07, 2024

Frontend File Manager Plugin # CVE-2014-5324

CVE, Research URL: CVE-2014-5324
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Sep 26, 2014
Research Description: Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authenticated users to execute arbitrary PHP code by leveraging Author privileges to store a file.
Affected versions: max 3.6.
Status: vulnerable

Frontend File Manager Plugin # CVE-2022-3125

CVE, Research URL: CVE-2022-3125
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Oct 03, 2022
Research Description: The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE
Affected versions: max 21.3.
Status: vulnerable

Frontend File Manager Plugin # CVE-2022-3126

CVE, Research URL: CVE-2022-3126
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Oct 17, 2022
Research Description: The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf
Affected versions: max 21.4.
Status: vulnerable

Frontend File Manager Plugin # CVE-2021-4365

CVE, Research URL: CVE-2021-4365
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 07, 2023
Research Description: The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to, and including, 18.2. This is due to lacking authentication protections and santisation all on the wpfm_edit_file_title_desc AJAX action. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # CVE-2021-4356

CVE, Research URL: CVE-2021-4356
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 07, 2023
Research Description: The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Download in versions up to, and including, 18.2. This is due to lacking authentication protections, capability checks, and sanitization, all on the wpfm_file_meta_update AJAX action. This makes it possible for unauthenticated attackers to download arbitrary files on the site, potentially leading to site takeover.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # CVE-2021-4351

CVE, Research URL: CVE-2021-4351
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 07, 2023
Research Description: The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Post Meta Change in versions up to, and including, 18.2. This is due to lacking authentication protections, capability checks, and sanitization, all on the wpfm_file_meta_update AJAX action. This makes it possible for unauthenticated attackers to change the meta data of certain posts and pages.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # CVE-2021-4350

CVE, Research URL: CVE-2021-4350
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 07, 2023
Research Description: The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated HTML Injection in versions up to, and including, 18.2. This is due to lacking authentication protections on the wpfm_send_file_in_email AJAX action. This makes it possible for unauthenticated attackers to send emails using the site with a custom subject, recipient email, and body with unsanitized HTML content. This effectively lets the attacker use the site as a spam relay.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # CVE-2022-3124

CVE, Research URL: CVE-2022-3124
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Oct 03, 2022
Research Description: The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server
Affected versions: max 21.3.
Status: vulnerable

Frontend File Manager Plugin # CVE-2021-4344

CVE, Research URL: CVE-2021-4344
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 07, 2023
Research Description: The Frontend File Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 18.2. This is due to lacking mishandling the use of user IDs that is accessible by the visitor. This makes it possible for unauthenticated or authenticated attackers to access the information and privileges of other users, including 'guest users', in their own category (authenticated, or unauthenticated guests).
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # CVE-2021-4368

CVE, Research URL: CVE-2021-4368
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 07, 2023
Research Description: The Frontend File Manager plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 18.2. This is due to lacking capability checks and a security nonce, all on the wpfm_save_settings AJAX action. This makes it possible for subscriber-level attackers to edit the plugin settings, such as the allowed upload file types. This can lead to remote code execution through other vulnerabilities.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # CVE-2023-5105

CVE, Research URL: CVE-2023-5105
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Dec 05, 2023
Research Description: The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as `wp-config.php`
Affected versions: max 22.7.
Status: vulnerable

Frontend File Manager Plugin # CVE-2021-4359

CVE, Research URL: CVE-2021-4359
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 07, 2023
Research Description: The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 18.2. This is due to lacking authentication protections and lacking a security nonce on the wpfm_delete_file AJAX action. This makes it possible for unauthenticated attackers to delete any posts and pages on the site.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # CVE-2021-4369

CVE, Research URL: CVE-2021-4369
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 07, 2023
Research Description: The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Content Injection in versions up to, and including, 18.2. This is due to lacking authorization protections, checks against users editing other's posts, and lacking a security nonce, all on the wpfm_edit_file_title_desc AJAX action. This makes it possible for unauthenticated attackers to edit the content and title of every page on the site.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # CVE-2024-25903

CVE, Research URL: CVE-2024-25903
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Mar 17, 2024
Research Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a through 22.7.
Affected versions: max 22.8.
Status: vulnerable

Oct 18, 2024

Frontend File Manager Plugin # CVE-2016-15042

CVE, Research URL: CVE-2016-15042
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Oct 16, 2024
Research Description: The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
Affected versions: max 4.0.
Status: vulnerable

Jul 06, 2025

Frontend File Manager Plugin # CVE-2025-27358

CVE, Research URL: CVE-2025-27358
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 04, 2025
Research Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Code Injection.This issue affects Frontend File Manager: from n/a through <= 23.6.
Affected versions: max 23.6.
Status: vulnerable

Jul 27, 2025

Frontend File Manager Plugin # CVE-2023-7306

CVE, Research URL: CVE-2023-7306
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 25, 2025
Research Description: The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpfm_delete_multiple_files() function in all versions up to, and including, 21.5. This makes it possible for unauthenticated attackers to delete arbitrary posts.
Affected versions: max 22.0.
Status: vulnerable

Dec 10, 2025

Frontend File Manager Plugin # CVE-2025-64265

CVE, Research URL: CVE-2025-64265
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Nov 13, 2025
Research Description: Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.2.
Affected versions: max 23.3.
Status: vulnerable

Frontend File Manager Plugin # CVE-2025-13382

CVE, Research URL: CVE-2025-13382
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Nov 25, 2025
Research Description: The Frontend File Manager Plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 23.4. This is due to the plugin not validating file ownership before processing file rename requests in the '/wpfm/v1/file-rename' REST API endpoint. This makes it possible for authenticated attackers, with Subscriber-level access and above, to rename files uploaded by other users via the 'fileid' parameter.
Affected versions: max 23.5.
Status: vulnerable

Jan 28, 2026

Frontend File Manager Plugin # CVE-2025-14804

CVE, Research URL: CVE-2025-14804
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jan 07, 2026
Research Description: The Frontend File Manager Plugin WordPress plugin before 23.5 did not validate a path parameter and ownership of the file, allowing any authenticated users, such as subscribers to delete arbitrary files on the server
Affected versions: max 23.5.
Status: vulnerable

Feb 28, 2026

Frontend File Manager Plugin # CVE-2026-25005

CVE, Research URL: CVE-2026-25005
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Feb 19, 2026
Research Description: Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.5.
Affected versions: max 23.6.
Status: vulnerable

Apr 15, 2026

Frontend File Manager Plugin # CVE-2026-0829

CVE, Research URL: CVE-2026-0829
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Feb 17, 2026
Research Description: The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the site without any security checks. This lets attackers use the WordPress site as an open relay for spam or phishing emails to anyone. Attackers can also guess file IDs to access and share uploaded files without permission, exposing sensitive information.
Affected versions: max 23.5.
Status: vulnerable

Apr 20, 2026

Frontend File Manager Plugin # CVE-2026-1280

CVE, Research URL: CVE-2026-1280
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jan 28, 2026
Research Description: The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a missing capability check on the 'wpfm_send_file_in_email' AJAX action in all versions up to, and including, 23.5. This makes it possible for unauthenticated attackers to share arbitrary uploaded files via email by supplying a file ID. Since file IDs are sequential integers, attackers can enumerate all uploaded files on the site and exfiltrate sensitive data that was intended to be restricted to administrators only.
Affected versions: max 23.5.
Status: vulnerable

Apr 23, 2026

Frontend File Manager Plugin # CVE-2025-57921

CVE, Research URL: CVE-2025-57921
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Sep 23, 2025
Research Description: Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.3.
Affected versions: max 23.4.
Status: vulnerable

Jun 14, 2026

Frontend File Manager Plugin # CVE-2026-5337

CVE, Research URL: CVE-2026-5337
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: May 03, 2026
Research Description: During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure Direct Object Reference (IDOR) attack. This vulnerability exists because the Frontend File Manager Plugin WordPress plugin through 23.6 does not properly validate user authorization for the requested uploaded file when processing download requests. By modifying the value of the 'file_id' parameter in the download endpoint (e.g., http://localhost/?do=wpfm_download&file_id=40&nm_file_nonce=a36fb893f1), an attacker can access files belonging to other users, including privileged users such as administrators. This allows unauthorized access/read to sensitive data stored within the application.
Affected versions: max 23.6.
Status: vulnerable

Jun 16, 2026

Frontend File Manager Plugin # 1b2b258eb6e36c8ee05d0af7280a2428b42863f8

CVE, Research URL: 1b2b258eb6e36c8ee05d0af7280a2428b42863f8
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 WordPress Frontend File Manager plugin <= 18.2 - Unauthenticated Post Meta Change and Arbitrary File Download vulnerability Unauthenticated Post Meta Change and Arbitrary File Download vulnerability discovered by Jerome Bruandet (NinTechNet) in WordPress Frontend File Manager plugin (versions <= 18.2).
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # 0ac234ee4998460d667e3027990f6615ca8999a3

CVE, Research URL: 0ac234ee4998460d667e3027990f6615ca8999a3
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Sep 19, 2016
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 4.0 WordPress Front End File Upload And Manager Plugin <= 3.9 - Arbitrary File Upload This plugin is prone to an arbitrary file upload vulnerability. Update the plugin.
Affected versions: max 4.0.
Status: vulnerable

Frontend File Manager Plugin # 9711ab0aae9fe7f06fc7d60b7dbf9f6d7d46de55

CVE, Research URL: 9711ab0aae9fe7f06fc7d60b7dbf9f6d7d46de55
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 WordPress Frontend File Manager plugin <= 18.2 - Unauthenticated HTML Injection vulnerability Unauthenticated HTML Injection vulnerability discovered by Jerome Bruandet (NinTechNet) in WordPress Frontend File Manager plugin (versions <= 18.2).
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # 2f47ac3e4672c1befd88b30de6a742568cc2a1b2

CVE, Research URL: 2f47ac3e4672c1befd88b30de6a742568cc2a1b2
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 WordPress Frontend File Manager plugin <= 18.2 - Unauthenticated Arbitrary Post Deletion vulnerability Unauthenticated Arbitrary Post Deletion vulnerability discovered by Jerome Bruandet (NinTechNet) in WordPress Frontend File Manager plugin (versions <= 18.2).
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # 371a175ea118ba60f1f696c677f8e31b0190fe9d

CVE, Research URL: 371a175ea118ba60f1f696c677f8e31b0190fe9d
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 WordPress Frontend File Manager plugin <= 18.2 - Unauthenticated Content Injection and Stored XSS vulnerabilities Unauthenticated Content Injection and Stored XSS vulnerabilities discovered by Jerome Bruandet (NinTechNet) in WordPress Frontend File Manager plugin (versions <= 18.2).
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # 0b45c0e6c3017015881cc2ee8e9e2e10a5a6b2cd

CVE, Research URL: 0b45c0e6c3017015881cc2ee8e9e2e10a5a6b2cd
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Sep 06, 2022
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 21.3 Frontend File Manager <= 21.3 - Cross-Site Request Forgery to Plugin Settings Update The Frontend File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 21.3. This is due to missing or incorrect nonce validation on the wpfm_save_settings function. This makes it possible for unauthenticated attackers to modify the plugin's settings, via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 21.3.
Status: vulnerable

Frontend File Manager Plugin # 7269a84eee3222ec6e10d7111ce406b64c389fc1

CVE, Research URL: 7269a84eee3222ec6e10d7111ce406b64c389fc1
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 11, 2015
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 3.8 WordPress N-Media File Uploader Plugin <= 3.7 - Arbitrary File Upload This plugin is prone to an arbitrary file upload vulnerability. Update the plugin.
Affected versions: max 3.8.
Status: vulnerable

Frontend File Manager Plugin # 77a614ddfa9897e6e5e65001e9f078fbb5f69087

CVE, Research URL: 77a614ddfa9897e6e5e65001e9f078fbb5f69087
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 WordPress Frontend File Manager plugin <= 18.2 - Authenticated Settings Change and Arbitrary File Upload vulnerabilities Authenticated Settings Change and Arbitrary File Upload vulnerabilities discovered by Jerome Bruandet (NinTechNet) in WordPress Frontend File Manager plugin (versions <= 18.2).
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # 970e473f2a8c8f732eb8a8e61749f39a669cc022

CVE, Research URL: 970e473f2a8c8f732eb8a8e61749f39a669cc022
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Sep 26, 2022
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 21.4 WordPress Frontend File Manager plugin <= 21.3 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability discovered by WPScan in WordPress Frontend File Manager plugin (versions <= 21.3) Update the WordPress Frontend File Manager plugin to the latest available version (at least 21.4).
Affected versions: max 21.4.
Status: vulnerable

Frontend File Manager Plugin # 749d5b3ef13679c7107a83dd12108fe1b0c12e6a

CVE, Research URL: 749d5b3ef13679c7107a83dd12108fe1b0c12e6a
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.0 WordPress Frontend File Manager plugin <= 17.1 - Privilege Escalation vulnerability Privilege Escalation vulnerability discovered by Jerome Bruandet (NinTechNet) in WordPress Frontend File Manager plugin (versions <= 17.1).
Affected versions: max 18.0.
Status: vulnerable

Frontend File Manager Plugin # 7e3c5b65cd95debb66dc4c0461414e4a22eafb9a

CVE, Research URL: 7e3c5b65cd95debb66dc4c0461414e4a22eafb9a
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 11, 2015
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 2.0 WordPress N-Media File Uploader Plugin <= 1.9 - Arbitrary File Upload This plugin is prone to an arbitrary file upload vulnerability. Update the plugin.
Affected versions: max 2.0.
Status: vulnerable

Frontend File Manager Plugin # 7642b207ed51aef80a82f74e29e4a3afc65b94ed

CVE, Research URL: 7642b207ed51aef80a82f74e29e4a3afc65b94ed
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Post Meta Change in versions up to, and including, 18.2. This is due to lacking authentication protections, capability checks, and sanitization, all on the wpfm_file_meta_update AJAX action. This makes it possible for unauthenticated attackers to change the meta data of certain posts and pages.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # f4e80519a29554957a333b718408678635c2b8a6

CVE, Research URL: f4e80519a29554957a333b718408678635c2b8a6
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 Frontend File Manager Plugin <= 18.2 - Unauthenticated Arbitrary Post Deletion The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 18.2. This is due to lacking authentication protections and lacking a security nonce on the wpfm_delete_file AJAX action. This makes it possible for unauthenticated attackers to delete any posts and pages on the site.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # 07dd85d5f166b3c0e089a6782d54795ce85c25c8

CVE, Research URL: 07dd85d5f166b3c0e089a6782d54795ce85c25c8
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 Frontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam Emails The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated HTML Injection in versions up to, and including, 18.2. This is due to lacking authentication protections on the wpfm_send_file_in_email AJAX action. This makes it possible for unauthenticated attackers to send emails using the site with a custom subject, recipient email, and body with unsanitized HTML content. This effectively lets the attacker use the site as a spam relay.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # 578792c0d807cf3a62085734b3c91db33b97ede3

CVE, Research URL: 578792c0d807cf3a62085734b3c91db33b97ede3
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 Frontend File Manager <= 18.2 - Unauthenticated Stored Cross-Site Scripting The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to, and including, 18.2. This is due to lacking authentication protections and santisation all on the wpfm_edit_file_title_desc AJAX action. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # 8015a9071d3d4769e4519e76b5fc28acfe26878d

CVE, Research URL: 8015a9071d3d4769e4519e76b5fc28acfe26878d
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 Frontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File Upload The Frontend File Manager plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 18.2. This is due to lacking capability checks and a security nonce, all on the wpfm_save_settings AJAX action. This makes it possible for subscriber-level attackers to edit the plugin settings, such as the allowed upload file types. This can lead to remote code execution through other vulnerabilities.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # e3363e89d388cbc53d3731e9d9987a895c622710

CVE, Research URL: e3363e89d388cbc53d3731e9d9987a895c622710
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 Frontend File Manager <= 18.2 - Unauthenticated Arbitrary File Download The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Download in versions up to, and including, 18.2. This is due to lacking authentication protections, capability checks, and sanitization, all on the wpfm_file_meta_update AJAX action. This makes it possible for unauthenticated attackers to download arbitrary files on the site, potentially leading to site takeover.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # b86e5b52b92d2fd20064b61e72a3b83b501ffc63

CVE, Research URL: b86e5b52b92d2fd20064b61e72a3b83b501ffc63
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 Frontend File Manager <= 18.2 - Unauthenticated Content Injection The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Content Injection in versions up to, and including, 18.2. This is due to lacking authorization protections, checks against users editing other's posts, and lacking a security nonce, all on the wpfm_edit_file_title_desc AJAX action. This makes it possible for unauthenticated attackers to edit the content and title of every page on the site.
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # 3d396aaae08840c65a313d47ce3ac35ec8f8aa4c

CVE, Research URL: 3d396aaae08840c65a313d47ce3ac35ec8f8aa4c
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 12, 2021
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 18.3 Frontend File Manager <= 18.2 - Privilege Escalation The Frontend File Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 18.2. This is due to lacking mishandling the use of user IDs that is accessible by the visitor. This makes it possible for unauthenticated or authenticated attackers to access the information and privileges of other users, including 'guest users', in their own category (authenticated, or unauthenticated guests).
Affected versions: max 18.3.
Status: vulnerable

Frontend File Manager Plugin # 3a71f029d16a3bb4e50e64c9556aecf0b579276d

CVE, Research URL: 3a71f029d16a3bb4e50e64c9556aecf0b579276d
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 16, 2016
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 4.0 Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
Affected versions: max 4.0.
Status: vulnerable

Frontend File Manager Plugin # 783496e57e0855d0a9ecb9031b634c9a6692aa2a

CVE, Research URL: 783496e57e0855d0a9ecb9031b634c9a6692aa2a
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 10, 2015
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 3.8 Frontend File Manager <= 3.7 - Arbitrary File Upload The Frontend File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in versions up to, and including, 3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
Affected versions: max 3.8.
Status: vulnerable

Frontend File Manager Plugin # e5a15d37-d50a-4774-9ba0-b497779c2dd3

CVE, Research URL: e5a15d37-d50a-4774-9ba0-b497779c2dd3
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: -
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 3.8 N-Media File Uploader <= 3.7 - Arbitrary File Upload The Frontend File Manager Plugin WordPress plugin was affected by an Arbitrary File Upload security vulnerability.
Affected versions: max 3.8.
Status: vulnerable

Frontend File Manager Plugin # 38770519-dd50-42c5-ac4e-c5b3378db6ee

CVE, Research URL: 38770519-dd50-42c5-ac4e-c5b3378db6ee
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: -
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 3.8 N-Media File Uploader <= 3.7 - Unauthenticated Arbitrary File Upload This plugin enables users to upload files to a wordpress-instance and share it with the wordpress-admin. Through insufficient input validation an unauthenticated attacker is able to bypass the restriction and upload arbitrary content. This uploaded content can be executed by calling the URL of the file in the public available upload directory.
Affected versions: max 3.8.
Status: vulnerable

Frontend File Manager Plugin # 94acfb57-8e2e-49d3-944c-9609e58cafc8

CVE, Research URL: 94acfb57-8e2e-49d3-944c-9609e58cafc8
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: -
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 2.0 N-Media File Uploader < 2.0 Arbitrary File Upload The Frontend File Manager Plugin WordPress plugin was affected by security vulnerability.
Affected versions: max 2.0.
Status: vulnerable

Frontend File Manager Plugin # 052f7d9a-aaff-4fb1-92b7-aeb83cc705a7

CVE, Research URL: 052f7d9a-aaff-4fb1-92b7-aeb83cc705a7
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: -
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 4.0 Front end file upload and manager Plugin <= 3.9 - Arbitrary File Upload The Frontend File Manager Plugin WordPress plugin was affected by an Arbitrary File Upload security vulnerability.
Affected versions: max 4.0.
Status: vulnerable

Frontend File Manager Plugin # da8fe4b1-1505-40d2-b16c-1533a2a6051a

CVE, Research URL: da8fe4b1-1505-40d2-b16c-1533a2a6051a
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: -
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 21.4 Frontend File Manager < 21.4 - Arbitrary Settings Update via CSRF The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack. As the plugin does not validate the allowed file type, this could lead to attackers making admins allowing PHP file to be uploaded by any authenticated users
Affected versions: max 21.4.
Status: vulnerable

Jun 25, 2026

Frontend File Manager Plugin # CVE-2026-8378

CVE, Research URL: CVE-2026-8378
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 23, 2026
Research Description: The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to the frontend file-rename endpoint before storing it as post meta and rendering it back on the admin File Manager listing, leading to a Stored Cross-Site Scripting vulnerability exploitable by users with Subscriber-level access and above against an administrator viewing the file management interface.
Affected versions: max 23.6.
Status: vulnerable

Frontend File Manager Plugin # CVE-2026-8379

CVE, Research URL: CVE-2026-8379
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 23, 2026
Research Description: The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly enforce its nonce check on the file download handler, allowing unauthenticated attackers to download files uploaded by any user through the Frontend File Manager Plugin WordPress plugin through 23.6 by iterating identifiers.
Affected versions: max 23.6.
Status: vulnerable

Jun 30, 2026

Frontend File Manager Plugin # CVE-2026-8380

CVE, Research URL: CVE-2026-8380
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 26, 2026
Research Description: The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly verify ownership of every targeted post before permanent deletion, allowing authenticated users with author-level access and above to permanently delete arbitrary posts and pages. When the Frontend File Manager Plugin WordPress plugin through 23.6's "Allow guest uploads" setting is enabled by an administrator, the same deletion primitive becomes reachable by unauthenticated users.
Affected versions: max 23.6.
Status: vulnerable

Frontend File Manager Plugin # CVE-2026-8095

CVE, Research URL: CVE-2026-8095
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jun 28, 2026
Research Description: The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and including 23.6. This is due to a case-sensitive bypass of the wpfm_dir_path parameter sanitization in the wpfm_file_meta_update AJAX handler, where supplying WPFM_DIR_PATH in uppercase evades the unset check and is normalized to wpfm_dir_path by sanitize_key() during update_post_meta(), allowing an attacker to overwrite the stored file path with an arbitrary filesystem path that is then passed directly to unlink() in delete_file_locally() without any directory containment validation. This makes it possible for authenticated attackers with Subscriber-level access to delete arbitrary files on the server, including sensitive files such as wp-config.php, potentially leading to full site takeover.
Affected versions: max 23.6.
Status: vulnerable

Jul 10, 2026

Frontend File Manager Plugin # CVE-2026-12277

CVE, Research URL: CVE-2026-12277
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Jul 07, 2026
Research Description: The Frontend File Manager Plugin WordPress plugin through 23.6 does not validate a file path derived from user input before deleting the referenced file, allowing unauthenticated users to delete arbitrary files on the server (such as wp-config.php) when guest upload mode is enabled. Deleting wp-config.php forces the site into its setup routine, which can be leveraged toward a full site takeover.
Affected versions: max 23.6.
Status: vulnerable

Aug 04, 2026

Frontend File Manager Plugin # CVE-2026-16292

CVE, Research URL: CVE-2026-16292
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Date: Aug 02, 2026
Research Description: The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the metadata of a logged-in user's uploaded file via a CSRF attack, which can be leveraged to download that file. When guest uploads are enabled, the same action is reachable unauthenticated against any user's file.
Affected versions: max 23.6.
Status: vulnerable