Approved changes feed: RSS · Atom

cpe:2.3:a:n-media:frontend_file_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN Media (46d10340-ddef-5eb8-b937-dafe41a6924d)
ProductFrontend File Manager (d09438b2-fd55-5083-a9f0-6ccd3815a396)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25005 vulnerable 2026-06-08 07:53:18.821946 WordPress Frontend File Manager plugin <= 23.5 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (5.3)
Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.5.
Published: 2026-02-19T08:26:51.878Z
Updated: 2026-04-28T16:14:53.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64265 vulnerable 2026-06-08 07:39:18.297061 WordPress Frontend File Manager plugin <= 23.2 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.2.
Published: 2025-11-13T09:24:29.310Z
Updated: 2026-04-28T16:14:12.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57921 vulnerable 2026-06-08 07:33:16.351775 WordPress Frontend File Manager plugin <= 23.3 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.3.
Published: 2025-09-22T18:25:12.385Z
Updated: 2026-05-12T00:52:34.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27358 vulnerable 2026-06-08 07:14:54.724715 WordPress Frontend File Manager plugin <= 23.6 - Content Injection vulnerability
MEDIUM (4.6)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Code Injection.This issue affects Frontend File Manager: from n/a through <= 23.6.
Published: 2025-07-04T08:42:10.238Z
Updated: 2026-04-28T16:11:49.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25903 vulnerable 2026-06-08 06:31:23.970902 WordPress Frontend File Manager Plugin plugin <= 22.7 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a through 22.7.
Published: 2024-03-17T16:17:19.335Z
Updated: 2026-04-28T16:09:13.246Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.