user-private-files

WordPress · Plugin

10 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
User Private Files <= 2.1.0 - Missing AuthorizationCVE-2026-97332	user-private-files	WordPress	Medium	Fix reported	2026-10-09
User Private Files <= 2.1.8 - Authenticated (Subscriber+) Information ExposureCVE-2026-97331	user-private-files	WordPress	Medium	Fix reported	2026-10-09
File Sharing & Download Manager <= 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'fldr_ttl' ParameterCVE-2026-10093	user-private-files	WordPress	Medium	Fix reported	2026-06-16
User Private Files – File Upload & Download Manager with Secure File Sharing <= 2.1.3 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2024-13799	user-private-files	WordPress	Medium	Fix reported	2025-02-19
User Private Files <= 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private File AccessCVE-2024-7848	user-private-files	WordPress	Medium	Fix reported	2024-08-22
User Private Files < 2.0.5 - Insecure Direct Object ReferenceCVE-2023-4836	user-private-files	WordPress	Medium	Fix reported	2024-01-22
Frontend File Manager & Sharing – User Private Files <= 1.1.0 - Sensitive Information Disclosure	user-private-files	WordPress	Medium	Fix reported	2024-01-22
Frontend File Manager & Sharing – User Private Files <= 1.1.1 - Missing Authorization	user-private-files	WordPress	Medium	Fix reported	2024-01-22
Frontend File Manager & Sharing – User Private Files <= 1.1.2 - Subscriber+ Arbitrary File UploadCVE-2022-2356	user-private-files	WordPress	High	Fix reported	2024-01-22
WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2023-4636	user-private-files	WordPress	Medium	Fix reported	2024-01-22