The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
#LEI

Any interested party can access and search the complete Legal Entity Identifier (LEI) data pool free of charge and without the need to register, using the web-based LEI search tool developed by the Global Legal Entity Identifier Foundation (GLEIF). The LEI search tool provides enhanced functionality including the option to identify corporate ownership structures or pinpoint other identifiers that have been mapped to an LEI.