CVE-2014-5324

N-Media File Uploader < 3.4 - Authenticated PHP Code Execution via File Upload

Title source: llm
STIX 2.1

Description

Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authenticated users to execute arbitrary PHP code by leveraging Author privileges to store a file.

References (2)

Core 2
Core References
Third Party Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN87863382/index.html
Third Party Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000112

Scores

EPSS 0.0174
EPSS Percentile 74.9%

Details

CWE
CWE-94
Status published
Products (4)
najeebmedia/n-media_file_uploader 3.0
najeebmedia/n-media_file_uploader 3.1
najeebmedia/n-media_file_uploader 3.2
najeebmedia/n-media_file_uploader < 3.3
Published Sep 26, 2014
Tracked Since Feb 18, 2026