Stored Cross-Site Scripting Vulnerability in Filr - Secure Document Library Plugin for WordPress

CVE-2025-14632

What is CVE-2025-14632?

The Filr – Secure Document Library plugin for WordPress exhibits a vulnerability stemming from inadequate file type restrictions in the FILR_Uploader class. This flaw permits authenticated users with Administrator-level access or higher to upload harmful HTML files that contain JavaScript. The malicious code executes when any user with the right permissions accesses the uploaded content, potentially causing significant security issues.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References