Wp Post Frontend Vulnerabilities

[en] The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated at...

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

Oct 16, 2024

CVE-2016-15042 on NVD →

Arbitrary File Upload Vulnerability was found in WordPress N-Media Post Front-end Form Plugin v1.0. It only validates the file on client-side with JavaScript so the validation can be easily bypassed. Update the plugin.

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

Sep 19, 2016

The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attacke...

CVSS:

9.8

Affected:

up to 1.0

Fixed in:

1.1

Disclosed:

Jul 16, 2016

CVE-2016-15042 on NVD →

The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attacke...

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

Jul 16, 2016