What’s Vulnerable › Products

nmedia Frontend File Manager Plugin vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your nmedia Frontend File Manager Plugin version is affected

Latest nmedia Frontend File Manager Plugin vulnerabilities

• CVE-2026-8095 — Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion (CVSS 8.1)
• CVE-2026-1280 — Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter (CVSS 7.5)
• CVE-2025-13382 — Frontend File Manager Plugin <= 23.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming (CVSS 4.3)
• CVE-2023-7306 — Frontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion (CVSS 7.5)
• CVE-2023-5105 — Frontend File Manager < 22.6 - Editor+ Arbitrary File Download (CVSS 6.5)
• CVE-2021-4369 — Frontend File Manager <= 18.2 - Unauthenticated Content Injection (CVSS 5.3)
• CVE-2021-4368 — Frontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File Upload (CVSS 8.8)
• CVE-2021-4365 — Frontend File Manager <= 18.2 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
• CVE-2021-4359 — Frontend File Manager Plugin <= 18.2 - Unauthenticated Arbitrary Post Deletion (CVSS 5.3)
• CVE-2021-4356 — Frontend File Manager <= 18.2 - Unauthenticated Arbitrary File Download (CVSS 9.8)
• CVE-2021-4351 — Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change (CVSS 5.3)
• CVE-2021-4350 — Frontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam Emails (CVSS 5.3)
• CVE-2021-4344 — Frontend File Manager <= 18.2 - Privilege Escalation (CVSS 5.4)
• CVE-2022-3126 — Frontend File Manager < 21.4 - File Upload via CSRF (CVSS 4.3)