N-Media Frontend File Manager Missing Authorization Vulnerability Allowing Access Control Exploitation

Vulnerability

A missing authorization vulnerability has been identified in the N-Media Frontend File Manager plugin for WordPress, affecting versions through 23.2. This vulnerability allows users to exploit improperly configured access control settings, potentially leading to unauthorized actions or access.

Impact

Exploitation of this vulnerability could allow an unprivileged user to perform actions or access resources that require higher privileges, due to the lack of proper authorization checks.

Added: Sep 22, 2025, 7:27 PM
Updated: Sep 22, 2025, 11:40 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
5.0
exploitability
7.6
remediation
0.0
relevance
0.5
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.