Shared Files (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-28. Vendor: Unknown.

CVEs of Shared Files

• CVE-2026-12514 - CVSS 5.3 (medium), 2026-08-28: The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload…
• CVE-2026-12513 - CVSS 6.8 (medium), 2026-08-28: The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend…
• CVE-2025-15433 - CVSS 6.8 (medium), 2026-03-26: The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php)…
• CVE-2023-4819 - CVSS 6.1 (medium), 2023-10-16: The Shared Files WordPress plugin before 1.7.6 does not return the right Content-Type header for the specified uploaded file. Therefore, an attacker can…