Nmedia WordPress Member Conversation
Nmedia WordPress Member Conversation has one disclosed vulnerability in the WordSec catalog, all reported in 2012; it is fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 1 of the records (100%).
The one issue recorded for Nmedia WordPress Member Conversation has a vendor fix available, so running the current release closes it.
All of these findings were reported by Sammy Forgit. Nmedia WordPress Member Conversation is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2012-3577Nmedia WordPress Member Conversation < 1.4 - Arbitrary File Upload
Read the full analysisVulnerability Records
Nmedia WordPress Member Conversation
Author
N-Media
NMedia WordPress Member Conversation Plugin allow members to send and receive messages on any WordPress site. Lightning fast fronend UI. Setup in 5 seconds. Setup Create a page paste this shortocde: [nmconvo] Admin Settings: Dashboard -> WP Convo Features Ajax based conversation Users List Modal New conversation notification All conversations list in admin Multi Language supported Sanitization applied Responsive Design Demo & Detail Pro Features Control communication by roles File Attachment File Type, Size Control User list sorting, searching, pagination by DataTabe API Lifetime updates Pro Support Access Email Notification Extended Control Email Message Customization
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C