Nmedia N-Media Post Front-End Form vulnerabilities

1 known vulnerability affecting nmedia/n-media_post_front-end_form.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2016-15042CRITICALCVSS 9.8PoC≤ 1.02024-10-16

CVE-2016-15042 [CRITICAL] CWE-434 CVE-2016-15042: The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attackers to upload arbitrary files