N-Media
14 CVEs across 7 N-Media products. Browse N-Media vulnerabilities, severities, and proof-of-concept exploits.
N-Media products with known CVEs
N-Media CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-25005 | Medium | 5.3 | 2026-02-19 | Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configu… |
CVE-2025-64265 | Medium | 4.3 | 2025-11-13 | Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-53428 | High | 8.8 | 2025-10-22 | Incorrect Privilege Assignment vulnerability in N-Media Simple User Registration wp-registration allows Privilege Escalation.This issue affects Simple User Reg… |
CVE-2025-57921 | Medium | 5.3 | 2025-09-22 | Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2015-10137 | Critical | 9.8 | 2025-07-22 | The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_file(… |
CVE-2025-27358 | Medium | 4.6 | 2025-07-04 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows C… |
CVE-2025-31599 | Critical | 9.3 | 2025-04-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N-Media Bulk Product Sync sync-wc-google allows SQL Injec… |
CVE-2025-31852 | Medium | 4.3 | 2025-04-01 | Cross-Site Request Forgery (CSRF) vulnerability in N-Media Bulk Product Sync sync-wc-google allows Cross Site Request Forgery.This issue affects Bulk Product S… |
CVE-2025-30613 | Medium | 6.5 | 2025-04-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in N-Media Nmedia MailChimp nmedia-mailchimp-widget allows S… |
CVE-2024-53810 | Critical | 9.1 | 2024-12-06 | Missing Authorization vulnerability in N-Media Simple User Registration wp-registration allows Accessing Functionality Not Properly Constrained by ACLs.This is… |
CVE-2024-49604 | Critical | 9.8 | 2024-10-20 | Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This is… |
CVE-2024-33566 | Critical | 10.0 | 2024-04-29 | Missing Authorization vulnerability in N-Media OrderConvo allows OS Command Injection.This issue affects OrderConvo: from n/a through 12.4. |
CVE-2024-25903 | Medium | 5.3 | 2024-03-17 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a th… |
CVE-2019-5979 | High | 8.8 | 2019-07-05 | Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of a… |