Frontend File Manager Plugin <= 23.6 Unauthenticated IDOR Arbitrary File Download (CVE-2026-8379)

wpscan.com 2026-06-27翻訳準備中…中国語で表示中中国語 →English →

Security AdvisoryCVE-2026-8379Highnmedia-user-file-uploader

Affected:

nmedia-user-file-uploader <= 23.6

参照 CVE: CVE-2026-8379

文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档

本文由本平台从 wpscan.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。

このソースからの他の記事

Fluent Forms <6.2.5 Cross-Form IDOR Entry Deletion 2026-07-02 WordPress User Registration & Membership < 5.2.0 Unauthenticated Paid Membership Bypass 2026-07-02 Adminify <= 4.2.9 Contributor+ Sensitive Data Disclosure via Global Search AJAX (CVE-2026-11781) 2026-07-02 YOObtheme Pro <5.0.35 Stored XSS via UIkit Data Attributes (CVE-2026-10077) 2026-07-02

离线存档

离线截图 & PDF 为 Pro 专属