nmedia vulnerabilities
24 published CVEs name nmedia among the affected products.
- 24Published CVEs24 of them scored
- 7Last 12 monthspublished in the last year
- 4Critical7 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-8095
Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion
nmedia · Frontend File Manager Plugin
High8.1 - CVE-2026-1280
Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter
nmedia · Frontend File Manager Plugin
High7.5 - CVE-2026-0844
Simple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field
nmedia · Simple User Registration
High8.8 - CVE-2025-13382
Frontend File Manager Plugin <= 23.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming
nmedia · Frontend File Manager Plugin
Medium4.3 - CVE-2025-13389
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure
nmedia · Admin and Customer Messages After Order for WooCommerce: OrderConvo
Medium5.3 - CVE-2025-13452
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated User Impersonation in Order Messages
nmedia · Admin and Customer Messages After Order for WooCommerce: OrderConvo
Medium4.3 - CVE-2025-12160
Simple User Registration <= 6.6 - Unauthenticated Stored Cross-Site Scripting
nmedia · Simple User Registration
High7.2 - CVE-2023-7306
Frontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
nmedia · Frontend File Manager Plugin
High7.5 - CVE-2025-4334
Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation
nmedia · Simple User Registration
Critical9.8 - CVE-2024-13456
Easy Quiz Maker <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
nmedia · Easy Quiz Maker
Medium6.4