Nnmedia

Products

Exploited and recent CVEs

• CVE-2026-8095 High 8.1 Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion 0.6%
• CVE-2026-1280 High 7.5 Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter 0.3%
• CVE-2026-0844 High 8.8 Simple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field 0.3%
• CVE-2025-13382 Medium 4.3 Frontend File Manager Plugin <= 23.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming 0.2%
• CVE-2025-13389 Medium 5.3 Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure 0.3%
• CVE-2025-13452 Medium 4.3 Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated User Impersonation in Order Messages 0.3%
• CVE-2025-12160 High 7.2 Simple User Registration <= 6.6 - Unauthenticated Stored Cross-Site Scripting 0.2%
• CVE-2023-7306 High 7.5 Frontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion 0.4%
• CVE-2025-4334 Critical 9.8 Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation 2.6%
• CVE-2024-13456 Medium 6.4 Easy Quiz Maker <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2024-12826 Medium 4.3 GoHero Store Customizer for WooCommerce <= 3.5 - Missing Authorization to Unuthenticated Settings Update 0.3%
• CVE-2024-13355 Medium 5.4 Admin and Customer Messages After Order for WooCommerce <= 13.2 - Authenticated (Subscriber+) Limited File Upload to Cross-Site Scripting 0.4%
• CVE-2024-0629 Medium 5.3 2Checkout Payment Gateway for WooCommerce <= 6.2 - Missing Authorization via sniff_ins 0.4%
• CVE-2024-0829 Medium 4.3 Comments Extra Fields For Post,Pages and CPT <= 5.0 - Missing Authorization 0.5%
• CVE-2024-0830 Medium 4.3 Comments Extra Fields For Post,Pages and CPT <= 5.0 - Cross-Site Request Forgery 0.3%
• CVE-2021-4369 Medium 5.8 Frontend File Manager <= 18.2 - Unauthenticated Content Injection 0.8%
• CVE-2021-4368 Critical 9.9 Frontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File Upload 1.9%
• CVE-2021-4365 High 7.2 Frontend File Manager <= 18.2 - Unauthenticated Stored Cross-Site Scripting 0.8%
• CVE-2021-4359 Medium 6.5 Frontend File Manager Plugin <= 18.2 - Unauthenticated Arbitrary Post Deletion 0.9%
• CVE-2021-4356 Critical 9.0 Frontend File Manager <= 18.2 - Unauthenticated Arbitrary File Download 1.5%
• CVE-2021-4351 Medium 5.8 Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change 0.7%
• CVE-2021-4350 High 7.2 Frontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam Emails 0.7%
• CVE-2021-4344 Medium 6.4 Frontend File Manager <= 18.2 - Privilege Escalation 0.5%