Lucene search
+L

3863 matches found

RedhatCVE
RedhatCVE
•added 2026/02/20 1:26 p.m.•15 views

CVE-2026-25005

Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.5...

5.3CVSS5.5AI score0.00338EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/19 9:16 a.m.•15 views

CVE-2026-25005

Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.5...

5.3CVSS0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/19 8:26 a.m.•8 views

CVE-2026-25005 WordPress Frontend File Manager plugin <= 23.5 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.5...

5.3CVSS6AI score0.00338EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/19 8:26 a.m.•41 views

CVE-2026-25005 WordPress Frontend File Manager plugin <= 23.5 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.5...

5.3CVSS0.00338EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/19 8:26 a.m.•7 views

CVE-2026-25005

Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.5...

5.5AI score0.00338EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/19 8:26 a.m.•29 views

CVE-2026-25005

CVE-2026-25005 affects WordPress Frontend File Manager plugin versions up to and including 23.5, with an Insecure Direct Object References (IDOR) vulnerability that enables an Authorization Bypass through a user-controlled key, due to misconfigured access controls in the nmedia-user-file-uploader...

5.3CVSS6AI score0.00338EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/19 12:00 a.m.•18 views

WordPress plugin Frontend File Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00338EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/19 12:00 a.m.•16 views

PT-2026-20676

Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.5...

5.5AI score0.00338EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•2 views

CVE-2026-25005: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.5...

5.3CVSS5.9AI score0.00338EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/02/18 12:00 a.m.•13 views

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.2AI score0.00147EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/18 12:00 a.m.•22 views

The vulnerability of the Adobe Bridge file manager, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.1AI score0.00168EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2026/02/17 11:44 a.m.•25 views

WordPress Frontend File Manager Plugin plugin <= 23.5 - Unauthenticated Arbitrary Email Sending vulnerability

Unauthenticated Arbitrary Email Sending vulnerability discovered by yiğit ibrahim sağlam in WordPress Plugin Frontend File Manager versions = 23.5...

5.8CVSS5.4AI score0.00697EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/02/17 7:16 a.m.•24 views

CVE-2026-0829

The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the site without any security checks. This lets attackers use the WordPress site as an open relay for spam or phishing emails to anyone. Attackers can also guess file IDs to access a...

5.8CVSS0.00697EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/17 6:00 a.m.•64 views

CVE-2026-0829

The Frontend File Manager Plugin for WordPress (versions through 23.5 ) is vulnerable to unauthenticated arbitrary email sending and unauthorized file access due to a lack of authentication and security checks . Attackers can exploit this to use the website as an open relay for spam or phishing e...

5.8CVSS5.7AI score0.00697EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/17 6:00 a.m.•67 views

CVE-2026-0829 Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending

The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the site without any security checks. This lets attackers use the WordPress site as an open relay for spam or phishing emails to anyone. Attackers can also guess file IDs to access a...

0.00697EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/17 6:00 a.m.•17 views

CVE-2026-0829

The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the site without any security checks. This lets attackers use the WordPress site as an open relay for spam or phishing emails to anyone. Attackers can also guess file IDs to access a...

5.3AI score0.00697EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/17 6:00 a.m.•10 views

CVE-2026-0829 Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending

The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the site without any security checks. This lets attackers use the WordPress site as an open relay for spam or phishing emails to anyone. Attackers can also guess file IDs to access a...

5.7AI score0.00697EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/17 12:00 a.m.•7 views

CVE-2026-0829: Missing Authorization

The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the site without any security checks. This lets attackers use the WordPress site as an open relay for spam or phishing emails to anyone. Attackers can also guess file IDs to access a...

5.8CVSS5.6AI score0.00697EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/17 12:00 a.m.•20 views

WordPress plugin Frontend File Manager Plugin 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is a...

5.8CVSS5.7AI score0.00697EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/09 6:34 p.m.•57 views

CVE-2026-25231

FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 3.3.0, the application contains an unauthenticated file read vulnerability due to the lack of access control on the /uploads directory. Files uploaded to this directory can be accessed directly by any user who knows or...

7.5CVSS5.5AI score0.01686EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder