Filr Project vulnerabilities
We track 1 vulnerability in Filr Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 13, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Filr Project vulnerabilities
- 8.8 High severity
Filr – Secure document library: Missing Authorization
The Filr WordPress plugin before 1.2.2.1 does not have authorisation check in two of its AJAX actions, allowing them to be called by any authenticated users, such as subscriber. They are are protected with a nonce, however the nonce is leaked on the dashboard.