Nmedia WordPress Member Conversation WordPress Plugin

Download Trends

Loading download data…

Vulnerabilities

1 Total

1 Patched

0 Active

100% Resolved rate

Nmedia WordPress Member Conversation < 1.4 - Arbitrary File Upload

CWE-434 · Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/user_uploads.

9.8 Critical Affected All – 1.4 Patched in ✓ 1.4 Published 5 Jun 2012 CVE CVE-2012-3577

About Nmedia WordPress Member Conversation

Simple Member Messaging System for WordPress Site.

NMedia WordPress Member Conversation Plugin allow members to send and receive messages on any WordPress site.
Lightning fast fronend UI. Setup in 5 seconds.

Setup

Create a page
paste this shortocde: [nmconvo]
Admin Settings: Dashboard -> WP Convo

Features

Ajax based conversation
Users List Modal
New conversation notification
All conversations list in admin
Multi Language supported
Sanitization applied
Responsive Design

Demo & Detail

Pro Features

Control communication by roles
File Attachment
File Type, Size Control
User list sorting, searching, pagination by DataTabe API
Lifetime updates
Pro Support Access
Email Notification Extended Control
Email Message Customization

Screenshots

Option settings

Inbox

Create new message

Reply a message

All messages list in admin

Frequently Asked Questions

How to use this plugin for my page/post

Just place this shortcode [nmconvo]

Can I see Demo?

Yes Sure, Click here

How can admin see conversations

Yes

Any Recommendation about design?

You should have at least 500px wide space on page/post to render this.

Ratings & Reviews

Recent Reviews

Loading reviews…

View all reviews on WordPress.org (opens in a new tab)

Changelog

2.2 July 28, 2026

SECURITY FIX: Fixed broken access control allowing any logged-in user to read, reply to, or delete other members’ private conversations by guessing/enumerating the conversation ID
SECURITY FIX: Fixed SQL injection in conversation lookup, reply, and delete queries (unparameterized IDs)
Compatibility: Tested with WordPress 7.0

2.1 May 25, 2019

Tweaks: Remove variable form user role base function.

2.0 July 9, 2018

Deprecated functions removed
All new scripting
Bootsrap with DataTables
Fast UI

1.7

There was issue if Admin reply and then delete it, other user reply again to this then Admin only get notification all the time but can’t see it. So it is fixed

1.6

now you can place new message alert anywhere in site using shortcode [nm-convo-alertbox pageurl="http://domain.com/convopage_url"]

1.5

multi language support is updated

1.4

douplaod.php and uploadify files have been removed and use wp core security

1.3

javascript bug is removed

1.2

Email notifcation feature is activated
unread message bug is removed

1.0

It is just born, will grow with time

Alternatives to Nmedia WordPress Member Conversation

Other WordPress plugins serving a similar purpose, ranked by relevance and PF Score.

Bronze47.0

Akukita Chat with AI Translation

Live chat where every message is auto-translated into each reader's language. Rooms, DMs, moderation and reactions. 70+ languages, no API…

★ 5/5·Updated 5 Aug 2026

Nmedia WordPress Member Conversation

PF Score (About PF Scores)

Score Breakdown