Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Shared Files 1.7.67 Clear all filters
TI-2026-10739 CVE-2026-12514 · GHSA-4qpc-6xpr-g8g2

Shared Files < 1.7.70 - Unauthenticated Limited File Upload

Priority LOW 30

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00304 Published 2026-08-28 Fixed in 1.7.67, 1.7.70 CWE-862
TI-2026-10738 CVE-2026-12513 · GHSA-h23j-55hj-5495

Shared Files < 1.7.68 - Unauthenticated Arbitrary File Deletion via Path Traversal

Priority LOW 30

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend file submission and their single-pass traversal filter is bypass…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.0038 Published 2026-08-28 Fixed in 1.7.67, 1.7.68 CWE-73