FilePress vulnerabilities

2 known vulnerabilities in FilePress from Zyx0814. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  FilePress: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-90879Sep 15, 2026Zyx0814

  A vulnerability was identified in zyx0814 FilePress up to 3.0.1. This vulnerability affects unknown code of the file dzz/publish/search.php of the component Publish Module. Such manipulation of the argument orderby/order leads to sql injection. The attack can

• 7.3 High severity

  FilePress: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-8133May 8, 2026Zyx0814

  A security vulnerability has been detected in zyx0814 FilePress up to 2.2.0. Affected by this vulnerability is an unknown functionality of the file dzz/shares/admin.php of the component Shares Filelist API. Such manipulation of the argument order leads to sql