File Away vulnerabilities

2 known vulnerabilities in File Away from Thomstark. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  File Away: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2025-2539Mar 20, 2025ThomstarkEPSS 1.69%

  The File Away plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated attackers, leveraging the use o

• 9.8 Critical severity

  File Away: Unrestricted Upload of File with Dangerous Type

  CVE-2025-2512Mar 19, 2025Thomstark

  The File Away plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check and missing file type validation in the upload() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated a