WordPress User Private Files Vulnerabilities

Wordpress User Private Files vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

4 October 2026

Insufficient File Protection in User Private Files Plugin for WordPress on Multisite Installations
CVE-2026-97332
WordPressUser Private Files👾🟡

16 June 2026

Stored Cross-Site Scripting in User Private Files Plugin for WordPress
CVE-2026-10093
WordPressSecure Client Portal A...6.4MEDIUM

1 May 2026

Reflected Cross-Site Scripting in Multiple WordPress Plugins
CVE-2024-13362
WordPressGo Fetch Jobs (for WP ...6.1MEDIUM

19 February 2025

Stored Cross-Site Scripting Vulnerability in User Private Files Plugin for WordPress
CVE-2024-13799
WordPressFile Sharing & Downloa...6.4MEDIUM

16 October 2024

Freemius SDK Vulnerabilities Affect Hundreds of WordPress Plugins and Themes
CVE-2022-4974
WordPressYasr – Yet Another Sta...6.3MEDIUM

22 August 2024

File Sharing Plugin Vulnerable to Insecure Direct Object Reference
CVE-2024-7848
WordPressFile Sharing & Downloa...4.3MEDIUM

5 September 2023

Stored Cross-Site Scripting in WordPress File Sharing Plugin by WordPress
CVE-2023-4636
WordPressFile Sharing & Downloa...👾🟡4.4MEDIUM

8 August 2022

User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
CVE-2022-2356
WordpressFrontend File Manager ...8.8HIGH