File Provider vulnerabilities

1 known vulnerability in File Provider from File Provider. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  File Provider: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-4578Jun 4, 2025File Provider

  The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection