Skip to content
nmedia Frontend File Manager Plugin
-
CVE-2026-8095
High 8.1
Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion
0.6%
-
CVE-2026-1280
High 7.5
Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter
0.3%
-
CVE-2025-13382
Medium 4.3
Frontend File Manager Plugin <= 23.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming
0.2%
-
CVE-2023-7306
High 7.5
Frontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
0.4%
-
CVE-2021-4369
Medium 5.8
Frontend File Manager <= 18.2 - Unauthenticated Content Injection
0.8%
-
CVE-2021-4368
Critical 9.9
Frontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File Upload
1.9%
-
CVE-2021-4365
High 7.2
Frontend File Manager <= 18.2 - Unauthenticated Stored Cross-Site Scripting
0.8%
-
CVE-2021-4359
Medium 6.5
Frontend File Manager Plugin <= 18.2 - Unauthenticated Arbitrary Post Deletion
0.9%
-
CVE-2021-4356
Critical 9.0
Frontend File Manager <= 18.2 - Unauthenticated Arbitrary File Download
1.5%
-
CVE-2021-4351
Medium 5.8
Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change
0.7%
-
CVE-2021-4350
High 7.2
Frontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam Emails
0.7%
-
CVE-2021-4344
Medium 6.4
Frontend File Manager <= 18.2 - Privilege Escalation
0.5%