https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 07:57:14 +0000 https://cve.radiocsirt.org/vuln/cve-2016-15042 <p><strong>Affected:</strong> nmedia N-Media Post Front-end Form, nmedia Frontend File Manager Plugin, najeebmedia frontend_file_manager, najeebmedia n-media_post_front-end_form</p> <p>The Frontend File Manager (versions &lt; 4.0), N-Media Post Front-end Form (versions &lt; 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.</p> <p><strong>Affected:</strong> nmedia N-Media Post Front-end Form, nmedia Frontend File Manager Plugin, najeebmedia frontend_file_manager, najeebmedia n-media_post_front-end_form</p> <p>The Frontend File Manager (versions &lt; 4.0), N-Media Post Front-end Form (versions &lt; 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.</p> https://cve.radiocsirt.org/vuln/cve-2016-15042