CVE-2024-25903

WordPress Frontend File Manager Plugin plugin <= 22.7 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a through 22.7.

We have discovered 15 live websites that are affected by CVE-2024-25903.

Run a Free Instant Scan



Affected Software

Product  Nmedia User File Uploader
Category Wordpress Plugins
Vulnerable Domains15 live websites (100% of Nmedia User File Uploader install base)
Vulnerable Versions
  • from 0 through 22.7
Vulnerable Versions Count1 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor



Details

  • Published - Mar 17, 2024
  • Updated - Aug 1, 2024

Credits

  • Joshua Chan (Patchstack Alliance) (finder)

Website Distribution by Country

Number of websites using CVE-2024-25903
United States6 websites


Italy2 websites
Russia2 websites
Australia1 websites
Colombia1 websites
Greece1 websites
Netherlands1 websites
Vietnam1 websites

Website Distribution by TLD

Number of websites using CVE-2024-25903
.com5 websites
.it2 websites
.com.au1 websites
.nl1 websites
.org1 websites
.ru1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2024-25903

Top websites that are affected by CVE-2024-25903. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
******.org United States*,***,***
*************.com United States*,***,***
*****.ru Russia**,***,***
***********.com United States**,***,***
********.biz Russia**,***,***
****************.com United States**,***,***
*************.nl Netherlands**,***,***
***********.***.vn Vietnam**,***,***
**************.com United States**,***,***
************.com United States**,***,***
See full domain list

FAQ

CVE-2024-25903 is Exposure of Sensitive Information to an Unauthorized Actor in Nmedia User File Uploader
A total of 15 websites have been identified as vulnerable to CVE-2024-25903, based on global website indexing conducted by WebTechSurvey.
The Nmedia User File Uploader is affected by the CVE-2024-25903 vulnerability.
Nmedia User File Uploader versions up to and including 22.7 are vulnerable to CVE-2024-25903.