Nmedia Frontend File Manager vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Nmedia Frontend File Manager: 3 record(s), with affected versions and fixes.

CVE-2026-32577 High · 7.1 CWE-79 Oct 6, 2026

WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.

CVE-2026-25005 Medium · 5.3 CWE-639 Feb 19, 2026

WordPress Frontend File Manager plugin <= 23.5 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.5.

CVE-2025-64265 Medium · 4.3 CWE-862 Nov 13, 2025

WordPress Frontend File Manager plugin <= 23.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.2.