N-Media vulnerabilities
15 published CVEs name N-Media among the affected products.
- Published CVEs
- 15
- Last 12 months
- 3
- Critical
- 5
- Known exploited
- 0
Critical 5High 3Medium 7Low 0Not scored 0
CVEs per yearBy the year they were published
- 20191
- 20244
- 20258
- 20262
Newest CVEs
- CVE-2026-32577
WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability
N-Media · Frontend File Manager
High7.1 - CVE-2026-25005
WordPress Frontend File Manager plugin <= 23.5 - Insecure Direct Object References (IDOR) vulnerability
N-Media · Frontend File Manager
Medium5.3 - CVE-2025-64265
WordPress Frontend File Manager plugin <= 23.2 - Broken Access Control vulnerability
N-Media · Frontend File Manager
Medium4.3 - CVE-2025-53428
WordPress Simple User Registration plugin <= 6.8 - Privilege Escalation vulnerability
N-Media · Simple User Registration
High8.8 - CVE-2025-57921
WordPress Frontend File Manager plugin <= 23.3 - Broken Access Control vulnerability
N-Media · Frontend File Manager
Medium5.3 - CVE-2015-10137
Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload
N-Media · Website Contact Form With File Upload
Critical9.8 - CVE-2025-27358
WordPress Frontend File Manager plugin <= 23.6 - Content Injection vulnerability
N-Media · Frontend File Manager
Medium4.6 - CVE-2025-31599
WordPress Bulk Product Sync plugin <= 8.6 - SQL Injection vulnerability
N-Media · Bulk Product Sync
Critical9.3 - CVE-2025-31852
WordPress Bulk Product Sync plugin <= 8.6 - Cross Site Request Forgery (CSRF) vulnerability
N-Media · Bulk Product Sync
Medium4.3 - CVE-2025-30613
WordPress Nmedia MailChimp plugin <= 5.4 - Cross Site Scripting (XSS) Vulnerability
N-Media · Nmedia MailChimp
Medium6.5
Products with the most CVEs
Most common weaknesses
- CWE-862 Missing authorization4
- CWE-352 Cross-site request forgery (CSRF)2
- CWE-79 Cross-site scripting (XSS)2
- CWE-200 Exposure of sensitive information1
- CWE-266 1
- CWE-288 1
- CWE-306 Missing authentication for a critical function1
- CWE-434 Unrestricted file upload1
- CWE-639 Authorization bypass through a user-controlled key (IDOR)1
- CWE-80 Basic cross-site scripting1