Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: shared-files-pro 1.7.70 Clear all filters
TI-2026-15601 CVE-2026-19084 · GHSA-vw7p-45x7-3754

Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read

Priority LOW 39

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00434 Published 2026-08-28 Fixed in 1.7.70 CWE-73
TI-2026-10739 CVE-2026-12514 · GHSA-4qpc-6xpr-g8g2

Shared Files < 1.7.70 - Unauthenticated Limited File Upload

Priority LOW 30

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00304 Published 2026-08-28 Fixed in 1.7.67, 1.7.70 CWE-862