Plugin icon

Shared Files – Frontend File Upload Form & Secure File Sharing

shared-files

Vulnerabilities:

11

Last Updated:

March 30, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-03-05
Title
Shared Files < 1.7.58 - Contributor+ Arbitrary File Download
Fixed in
Fixed in 1.7.58
CVSS
6.8 (medium)
Published
2025-06-02
Title
Shared Files < 1.7.49 - Unauthenticated Stored Cross-Site Scripting via sanitize_file Function
Fixed in
Fixed in 1.7.49
CVSS
7.2 (high)
Published
2025-01-30
Title
Shared Files – Frontend File Upload Form & Secure File Sharing < 1.7.43 - Limited Unauthenticated Stored Cross-Site Scripting via File Upload
Fixed in
Fixed in 1.7.43
CVSS
7.2 (high)
Published
2024-08-09
Title
Shared Files < 1.7.29 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 1.7.29
CVSS
5.3 (medium)
Published
2024-05-07
Title
Shared Files < 1.7.20 - Missing Authorization
Fixed in
Fixed in 1.7.20
CVSS
5.3 (medium)
Published
2024-04-17
Title
Shared Files < 1.7.17 - Missing Authorization to Notice Dismissal
Fixed in
Fixed in 1.7.17
CVSS
5.3 (medium)
Published
2023-09-21
Title
Shared Files < 1.7.6 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.7.6
CVSS
8.8 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.7.1
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.6.72
CVSS
4.3 (medium)
Published
2021-10-18
Title
Shared Files < 1.6.61 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.61
CVSS
3.5 (low)
Published
2021-09-15
Title
Shared Files < 1.6.57 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.57
CVSS
3.5 (low)