PT-2021-16338

Name of the Vulnerable Software and Affected Versions: Shared Files WordPress plugin versions prior to 1.6.61 Description: The issue concerns the Shared Files WordPress plugin, where the Download Counter Text settings are not properly sanitized and escaped. This could allow high-privilege users t...

CVE-2021-24856: Improper Neutralization of Input During Web Page Generation

The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2021-16237

Name of the Vulnerable Software and Affected Versions: Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files WordPress plugin versions prior to 1.6.57 Description: The issue is related to the plugin not sanitizing and escaping some of its...