Najeebmedia vulnerabilities
We track 4 vulnerabilities in Najeebmedia products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 26, 2025.
Latest Najeebmedia vulnerabilities
- 9.8 Critical severity
Simple User Registration: Improper Privilege Management
The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for
- 9.8 Critical severity
Simple User Registration: Missing Authentication for Critical Functionality
Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through <= 6.7.
- 7.5 High severity
Frontend File Manager: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a through 22.7.
- 8.8 High severity
Frontend File Manager Plugin: Unrestricted Upload of File with Dangerous Type
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achi