Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-15433 2 Sharedfilespro, Wordpress 2 Shared Files, Wordpress 2026-03-26 6.8 Medium
The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector
CVE-2024-43230 2 Sharedfilespro, Tammersoft 2 Shared Files, Shared Files 2024-09-18 5.3 Medium
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Shared Files – File Upload Form Shared Files.This issue affects Shared Files: from n/a through 1.7.28.