Shared-files-pro (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-28. Vendor: Unknown.

CVEs of Shared-files-pro

• CVE-2026-19084 - CVSS 7.5 (high), 2026-08-28: The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated…
• CVE-2026-12514 - CVSS 5.3 (medium), 2026-08-28: The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload…
• CVE-2026-12513 - CVSS 6.8 (medium), 2026-08-28: The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend…