N-Media

14 CVEs across 7 N-Media products. Browse N-Media vulnerabilities, severities, and proof-of-concept exploits.

N-Media products with known CVEs

ProductCVEs
Frontend File Manager5
Simple User Registration3
Bulk Product Sync2
Nmedia Mailchimp1
Orderconvo1
Personalized Woocommerce Cart Page1
Website Contact Form With File Upload1
N-Media CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25005Medium5.32026-02-19Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configu…
CVE-2025-64265Medium4.32025-11-13Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security…
CVE-2025-53428High8.82025-10-22Incorrect Privilege Assignment vulnerability in N-Media Simple User Registration wp-registration allows Privilege Escalation.This issue affects Simple User Reg…
CVE-2025-57921Medium5.32025-09-22Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security…
CVE-2015-10137Critical9.82025-07-22The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_file(…
CVE-2025-27358Medium4.62025-07-04Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows C…
CVE-2025-31599Critical9.32025-04-11Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N-Media Bulk Product Sync sync-wc-google allows SQL Injec…
CVE-2025-31852Medium4.32025-04-01Cross-Site Request Forgery (CSRF) vulnerability in N-Media Bulk Product Sync sync-wc-google allows Cross Site Request Forgery.This issue affects Bulk Product S…
CVE-2025-30613Medium6.52025-04-01Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in N-Media Nmedia MailChimp nmedia-mailchimp-widget allows S…
CVE-2024-53810Critical9.12024-12-06Missing Authorization vulnerability in N-Media Simple User Registration wp-registration allows Accessing Functionality Not Properly Constrained by ACLs.This is…
CVE-2024-49604Critical9.82024-10-20Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This is…
CVE-2024-33566Critical10.02024-04-29Missing Authorization vulnerability in N-Media OrderConvo allows OS Command Injection.This issue affects OrderConvo: from n/a through 12.4.
CVE-2024-25903Medium5.32024-03-17Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a th…
CVE-2019-5979High8.82019-07-05Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of a…