Plugin icon

Secure Client Portal and Private File Sharing Plugin – User Private Files

user-private-files

Vulnerabilities:

6

Last Updated:

June 9, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-06-15
Title
File Sharing & Download Manager < 2.1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'fldr_ttl' Parameter
Fixed in
Fixed in 2.1.7
CVSS
6.4 (medium)
Published
2025-02-18
Title
User Private Files – File Upload & Download Manager with Secure File Sharing < 2.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.4
CVSS
6.4 (medium)
Published
2024-08-21
Title
User Private Files < 2.1.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private File Access
Fixed in
Fixed in 2.1.1
CVSS
4.3 (medium)
Published
2023-10-09
Title
WordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR
Fixed in
Fixed in 2.0.5
CVSS
4.3 (medium)
Published
2023-09-04
Title
WordPress File Sharing < 2.0.4 - Admin+ Stored XSS
Fixed in
Fixed in 2.0.4
CVSS
4.4 (medium)
Published
2022-07-12
Title
User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
Fixed in
Fixed in 1.1.3
CVSS
9.9 (critical)