Shared-files-pro vulnerabilities
We track 1 vulnerability in Shared-files-pro products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Shared-files-pro vulnerabilities
- 7.5 High severity
shared-files-pro: External Control of File Name or Path
The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL.