Vulnerabilidades em nmedia
23 resultadosCVE-2016-15042CRITICALFrontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File UploadEPSS 5.5%CVE-2025-4334CRITICALSimple User Registration <= 6.3 - Unauthenticated Privilege EscalationEPSS 2.1%CVE-2021-4368CRITICALFrontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File UploadEPSS 1.9%CVE-2021-4356CRITICALFrontend File Manager <= 18.2 - Unauthenticated Arbitrary File DownloadEPSS 1.5%CVE-2021-4359MEDIUMFrontend File Manager Plugin <= 18.2 - Unauthenticated Arbitrary Post DeletionEPSS 0.9%CVE-2021-4369MEDIUMFrontend File Manager <= 18.2 - Unauthenticated Content InjectionEPSS 0.8%CVE-2021-4365HIGHFrontend File Manager <= 18.2 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.8%CVE-2021-4351MEDIUMFrontend File Manager <= 18.2 - Unauthenticated Post Meta ChangeEPSS 0.7%CVE-2021-4350HIGHFrontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam EmailsEPSS 0.7%CVE-2024-0829MEDIUMComments Extra Fields For Post,Pages and CPT <= 5.0 - Missing AuthorizationEPSS 0.5%CVE-2021-4344MEDIUMFrontend File Manager <= 18.2 - Privilege EscalationEPSS 0.5%CVE-2024-0629MEDIUM2Checkout Payment Gateway for WooCommerce <= 6.2 - Missing Authorization via sniff_insEPSS 0.4%CVE-2024-13355MEDIUMAdmin and Customer Messages After Order for WooCommerce <= 13.2 - Authenticated (Subscriber+) Limited File Upload to Cross-Site ScriptingEPSS 0.4%CVE-2024-12826MEDIUMGoHero Store Customizer for WooCommerce <= 3.5 - Missing Authorization to Unuthenticated Settings UpdateEPSS 0.3%CVE-2024-0830MEDIUMComments Extra Fields For Post,Pages and CPT <= 5.0 - Cross-Site Request ForgeryEPSS 0.3%CVE-2023-7306HIGHFrontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post DeletionEPSS 0.3%CVE-2026-0844HIGHSimple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_fieldEPSS 0.3%CVE-2026-1280HIGHFrontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' ParameterEPSS 0.3%CVE-2025-13389MEDIUMAdmin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information DisclosureEPSS 0.2%CVE-2024-13456MEDIUMEasy Quiz Maker <= 2.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%