Search vulnerabilities

Results 2

Export CSV
CVE-2024-43230

WordPress Shared Files – Premium Download Manager & Secure File Sharing with Frontend File Upload plugin <= 1.7.28 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.28.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
CVE-2025-15433

Shared Files < 1.7.58 - Contributor+ Arbitrary File Download

The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed