Najeebmedia vulnerabilities, page 2

26 vulnerabilities

Known vulnerabilities in Najeebmedia products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 12 products.

4.3CVE-2024-0829najeebmediacomments_extra_fields_for_post\,_pages_and_cpt+2
EPSS score
0.53%
The Comments Extra Fields For Post,Pages and CPT plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.0. This is due to missing or incorrect capability checks on several ajax actions. This makes it possible for authenticated attackers, with subscriber access or higher, to invoke those actions. As a result, they may modify comment form fields and update plugin settings.7.5CVE-2024-25903n-mediafrontend file manager+2
EPSS score
0.45%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a through 22.7.9.8CVE-2024-49604n-mediasimple user registration+2
EPSS score
0.53%
Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through <= 6.7.5.4CVE-2019-14948najeebmediappom_for_woocommerce+1
EPSS score
1.04%
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.8.8CVE-2019-5979n-mediapersonalized woocommerce cart page+2
EPSS score
1.05%
Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.9.1CVE-2023-5105najeebmediafrontend_file_manager_plugin+2
EPSS score
1.05%
The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as `wp-config.php`