VYPR

N-Media Post Front-end Form

by N-Media

CVEs (1)

  • CVE-2016-15042Oct 16, 2024
    risk 0.06cvss epss 0.76

    The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This…