Frontend File Manager
N-Media
Developer
23.6
Latest version
1,000
Installations
No date
Last updated
Vulnerability history
2 present
21 fixed
8 Mitigation rules
- Subscriber+ Arbitrary File Deletion vulnerability< 23.5Jan 29, 2026
- Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter vulnerability<= 23.5Jan 28, 2026
- Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming vulnerability<= 23.4Nov 25, 2025
- Broken Access Control vulnerability<= 23.2Oct 30, 2025
- Broken Access Control vulnerability<= 23.3Sep 22, 2025
- Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability<= 21.5Jul 24, 2025
- Content Injection vulnerability<= 23.6Jul 4, 2025
- Sensitive Data Exposure vulnerability<= 22.7Feb 12, 2024
- Editor+ Arbitrary File Download vulnerability< 22.6Nov 13, 2023
- File Upload via Cross-Site Request Forgery (CSRF) vulnerability<= 21.3Sep 26, 2022
- Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability<= 21.3Sep 26, 2022
- Authenticated Arbitrary File Upload vulnerability<= 21.2Sep 7, 2022
- Unauthenticated File Renaming vulnerability<= 21.2Sep 7, 2022
- Privilege Escalation vulnerability<= 17.1Jul 12, 2021
- Unauthenticated Content Injection and Stored XSS vulnerabilities<= 18.2Jul 12, 2021
- Authenticated Settings Change and Arbitrary File Upload vulnerabilities<= 18.2Jul 12, 2021
- Unauthenticated HTML Injection vulnerability<= 18.2Jul 12, 2021
- Unauthenticated Post Meta Change and Arbitrary File Download vulnerability<= 18.2Jul 12, 2021
- Unauthenticated Arbitrary Post Deletion vulnerability<= 18.2Jul 12, 2021
- Arbitrary File Upload<= 3.9Sep 19, 2016
- Arbitrary File Upload<= 1.9Jun 11, 2015
- Arbitrary File Upload<= 3.7Jun 11, 2015
- Unrestricted File Upload<= 3.3Aug 18, 2014