Nmedia Frontend File Manager Plugin
12 CVEs affecting Nmedia Frontend File Manager Plugin. Latest disclosed: 2026-01-28. Critical: 3, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-4368 | Critical | 9.9 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 18.2. This is due to lacking ca… |
CVE-2016-15042 | Critical | 9.8 | 2024-10-16 | The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to… |
CVE-2021-4356 | Critical | 9.0 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Download in versions up to, and including, 18.2. This is due t… |
CVE-2026-1280 | High | 7.5 | 2026-01-28 | The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a missing capability check on the 'wpfm_send_file_in_email' AJ… |
CVE-2023-7306 | High | 7.5 | 2025-07-25 | The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpfm_delete_multiple_… |
CVE-2021-4365 | High | 7.2 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to, and including, 18.2. This is due… |
CVE-2021-4350 | High | 7.2 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated HTML Injection in versions up to, and including, 18.2. This is due to lacking a… |
CVE-2021-4359 | Medium | 6.5 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 18.2. This is due to… |
CVE-2021-4344 | Medium | 6.4 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 18.2. This is due to lacking mishandling… |
CVE-2021-4369 | Medium | 5.8 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Content Injection in versions up to, and including, 18.2. This is due to lackin… |
CVE-2021-4351 | Medium | 5.8 | 2023-06-07 | The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Post Meta Change in versions up to, and including, 18.2. This is due to lacking… |
CVE-2025-13382 | Medium | 4.3 | 2025-11-25 | The Frontend File Manager Plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 23.4. This is due to the… |