CVE-2016-15042 Scanner
CVE-2016-15042 Scanner - Arbitrary File Upload vulnerability in WordPress Frontend File Manager & N-Media Post Frontend
Used 3k times · 3.4k assets checked · domain, subdomain, ipv4
CVE
CVE-2016-15042
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
n-media post front-end formfrontend file manager pluginfrontend_file_managern-media_post_front-end_form
Updated Oct 12, 2026View on NVD →
S4E scanner
CVE history: n-media post front-end form
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →