CVE-2026-104110

Prior to version 3.24.0 , the FileRise Pro add-on was vulnerable to unauthenticated information disclosure via the /api/pro/portals/get.php endpoint. The root cause was a missing authentication gate (fr_pro_guard_auth()), allowing any caller who guessed a portal slug to retrieve a full internal r...