nmedia vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 20244
3. 20259
4. 20263

Newest CVEs

• CVE-2026-8095

  Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion

  nmedia · Frontend File Manager Plugin

  High8.1
• CVE-2026-1280

  Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter

  nmedia · Frontend File Manager Plugin

  High7.5
• CVE-2026-0844

  Simple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field

  nmedia · Simple User Registration

  High8.8
• CVE-2025-13382

  Frontend File Manager Plugin <= 23.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming

  nmedia · Frontend File Manager Plugin

  Medium4.3
• CVE-2025-13389

  Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure

  nmedia · Admin and Customer Messages After Order for WooCommerce: OrderConvo

  Medium5.3
• CVE-2025-13452

  Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated User Impersonation in Order Messages

  nmedia · Admin and Customer Messages After Order for WooCommerce: OrderConvo

  Medium4.3
• CVE-2025-12160

  Simple User Registration <= 6.6 - Unauthenticated Stored Cross-Site Scripting

  nmedia · Simple User Registration

  High7.2
• CVE-2023-7306

  Frontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

  nmedia · Frontend File Manager Plugin

  High7.5
• CVE-2025-4334

  Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

  nmedia · Simple User Registration

  Critical9.8
• CVE-2024-13456

  Easy Quiz Maker <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  nmedia · Easy Quiz Maker

  Medium6.4