N Media vulnerabilities
15 vulnerabilities
Known vulnerabilities in N Media products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.
Products
7- Frontend File Manager6 vulnerabilities
- Simple User Registration3 vulnerabilities
- Bulk Product Sync2 vulnerabilities
- Nmedia Mailchimp1 vulnerabilities
- Orderconvo1 vulnerabilities
- Personalized Woocommerce Cart Page1 vulnerabilities
- Website Contact Form With File Upload1 vulnerabilities
CVE-2015-10137n-mediawebsite contact form with file upload+2
EPSS score5.05%
The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_file()' function in versions up to, and including, 1.3.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.CVE-2025-31852n-mediabulk product sync+1EPSS score0.17%
Cross-Site Request Forgery (CSRF) vulnerability in N-Media Bulk Product Sync sync-wc-google allows Cross Site Request Forgery.This issue affects Bulk Product Sync: from n/a through <= 8.6.CVE-2025-31599n-mediabulk product sync+1EPSS score0.66%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N-Media Bulk Product Sync sync-wc-google allows SQL Injection.This issue affects Bulk Product Sync: from n/a through <= 8.6.CVE-2025-53428n-mediasimple user registration+1EPSS score0.36%
Incorrect Privilege Assignment vulnerability in N-Media Simple User Registration wp-registration allows Privilege Escalation.This issue affects Simple User Registration: from n/a through <= 6.8.CVE-2025-27358n-mediafrontend file manager+1EPSS score0.21%
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Code Injection.This issue affects Frontend File Manager: from n/a through <= 23.6.CVE-2025-57921n-mediafrontend file manager+1EPSS score0.32%
Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.3.CVE-2025-64265n-mediafrontend file manager+1EPSS score0.20%
Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.2.CVE-2025-30613n-medianmedia mailchimp+1EPSS score0.29%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in N-Media Nmedia MailChimp nmedia-mailchimp-widget allows Stored XSS.This issue affects Nmedia MailChimp: from n/a through <= 5.4.CVE-2024-25903n-mediafrontend file manager+2EPSS score0.45%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a through 22.7.CVE-2024-53810n-mediasimple user registration+1EPSS score0.46%
Missing Authorization vulnerability in N-Media Simple User Registration wp-registration allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Simple User Registration: from n/a through <= 5.5.CVE-2024-49604n-mediasimple user registration+2EPSS score0.53%
Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through <= 6.7.CVE-2024-33566n-mediaorderconvo+1EPSS score1.07%
Missing Authorization vulnerability in N-Media OrderConvo allows OS Command Injection.This issue affects OrderConvo: from n/a through 12.4.CVE-2019-5979n-mediapersonalized woocommerce cart page+2EPSS score1.05%
Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.CVE-2026-25005n-mediafrontend file manager+1EPSS score0.38%
Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.5.CVE-2026-32577n-mediafrontend file manager+1EPSS score0.24%
Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.