Log in Start free

N-Media

Products

ProductCVEsExploitedLatest
Frontend File Manager6–Oct 6, 2026
Simple User Registration3–Oct 22, 2025
Bulk Product Sync2–Apr 11, 2025
Nmedia MailChimp1–Apr 1, 2025
OrderConvo1–Apr 29, 2024

Exploited and recent CVEs

  • CVE-2026-32577 High 7.1 WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-25005 Medium 5.3 WordPress Frontend File Manager plugin <= 23.5 - Insecure Direct Object References (IDOR) vulnerability 0.4%
  • CVE-2025-64265 Medium 4.3 WordPress Frontend File Manager plugin <= 23.2 - Broken Access Control vulnerability 0.2%
  • CVE-2025-53428 High 8.8 WordPress Simple User Registration plugin <= 6.8 - Privilege Escalation vulnerability 0.4%
  • CVE-2025-57921 Medium 5.3 WordPress Frontend File Manager plugin <= 23.3 - Broken Access Control vulnerability 0.3%
  • CVE-2025-27358 Medium 4.6 WordPress Frontend File Manager plugin <= 23.6 - Content Injection vulnerability 0.2%
  • CVE-2025-31599 Critical 9.3 WordPress Bulk Product Sync plugin <= 8.6 - SQL Injection vulnerability 0.7%
  • CVE-2025-31852 Medium 4.3 WordPress Bulk Product Sync plugin <= 8.6 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-30613 Medium 6.5 WordPress Nmedia MailChimp plugin <= 5.4 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2024-53810 Critical 9.1 WordPress Simple User Registration plugin <= 5.5 - Broken Access Control on User Deletion vulnerability 0.5%
  • CVE-2024-49604 Critical 9.8 WordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability 0.5%
  • CVE-2024-33566 Critical 10.0 WordPress OrderConvo plugin <= 12.4 - Unauthenticated API Access to Arbitrary File Upload vulnerability 1.1%
  • CVE-2024-25903 Medium 5.3 WordPress Frontend File Manager Plugin plugin <= 22.7 - Sensitive Data Exposure vulnerability 0.5%