WordPress Shared Files Pro plugin < 1.7.68 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability discovered by Huynh Kien Minh in WordPress Plugin Shared Files Pro versions 1.7.68...

WordPress Shared Files Pro plugin < 1.7.70 - Unauthenticated Limited File Upload vulnerability

Unauthenticated Limited File Upload vulnerability discovered by hoangphuong in WordPress Plugin Shared Files Pro versions 1.7.70...

CVE-2026-19084

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL...

CVE-2026-12513

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend file submission and their single-pass traversal filter is bypassable, allowing unauthenticated users to store a path that points outside the...

EUVD-2026-67569

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL...

EUVD-2026-67566

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an unauthenticated visito...

EUVD-2026-67565

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend file submission and their single-pass traversal filter is bypassable, allowing unauthenticated users to store a path that points outside the...

CVE-2026-12514 Shared Files < 1.7.70 - Unauthenticated Limited File Upload

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an unauthenticated visito...

EUVD-2024-30466

Malicious code in bioql PyPI...

CVE-2024-32679

Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through = 1.7.16...

CVE-2024-32679

Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through = 1.7.16...

CVE-2024-32679

CVE-2024-32679 is a Missing Authorization vulnerability in Shared Files – Advanced File Sharing & Download Manager for WordPress (Shared Files) affecting versions up to 1.7.16. The issue stems from broken access control in Shared Files PRO Shared Files, potentially enabling unauthorized access to...

PT-2024-24764 · Unknown · Shared Files

Name of the Vulnerable Software and Affected Versions: Shared Files versions 1.7.16 and earlier Description: The issue is related to a Missing Authorization vulnerability in Shared Files PRO Shared Files. Recommendations: For versions 1.7.16 and earlier, update to a version that includes the fix...