Plugin icon

Filr – Secure document library

filr-protection

Vulnerabilities:

8

Last Updated:

October 2, 2026

Active Installs:

700

Published
Title
Fixed in
CVSS
Published
2026-02-26
Title
Filr – Secure document library < 1.2.14 - Authenticated (Contributor+) Arbitrary File Uploads
Fixed in
Fixed in 1.2.14
CVSS
7.2 (high)
Published
2026-01-16
Title
Filr – Secure document library < 1.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via HTML Upload
Fixed in
Fixed in 1.2.12
CVSS
4.4 (medium)
Published
2025-08-17
Title
Filr < 1.2.11 - Authenticated (Contributor+) Arbitrary File Deletion
Fixed in
Fixed in 1.2.11
CVSS
8.1 (high)
Published
2024-08-09
Title
Filr – Secure document library < 1.2.5 - Editor+ Stored XSS
Fixed in
Fixed in 1.2.5
CVSS
3.5 (low)
Published
2023-11-13
Title
Filr – Secure document library < 1.2.3.6 - Author+ RCE via file upload with phar ext
Fixed in
Fixed in 1.2.3.6
CVSS
9.1 (critical)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.2.3
CVSS
6.1 (medium)
Published
2022-05-23
Title
Filr - Secure Document Library < 1.2.2.1 - Subscriber+ AJAX Calls
Fixed in
Fixed in 1.2.2.1
CVSS
9.9 (critical)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.2.1
CVSS
4.3 (medium)