https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T12:26:01.543697+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-15042 CVE-2016-15042 — Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload 2026-10-23T12:26:01.576589+00:00

Affected: nmedia N-Media Post Front-end Form, nmedia Frontend File Manager Plugin, najeebmedia frontend_file_manager, najeebmedia n-media_post_front-end_form

The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.