Plugin icon

Prevent Direct Access – Protect WordPress Files

prevent-direct-access

Vulnerabilities:

3

Last Updated:

August 7, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-08-12
Title
Prevent Direct Access – Protect WordPress Files < 2.8.8.9 - Unauthenticated Protected File Access via Private Link Token Bypass
Fixed in
Fixed in 2.8.8.9
CVSS
5.3 (medium)
Published
2025-04-24
Title
Prevent Direct Access – Protect WordPress Files < 2.8.8.1 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 2.8.8.1
CVSS
5.3 (medium)
Published
2025-04-24
Title
Prevent Direct Access 2.8.6 - 2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions
Fixed in
Fixed in 2.8.8.3
CVSS
5.4 (medium)