plugin
4 known security issues reported for the Prevent File Access WordPress plugin. Most recent disclosed Aug 6, 2025.
Running Prevent File Access on your site? Check whether your installed version is affected.
Scan your site freeThe Prevent files / folders access plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.6.0 via the mo_media_show_file_or_folder() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the orig...
[en] The Prevent files / folders access WordPress plugin before 2.5.2 does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.
The Prevent files / folders access plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mo_media_restrict_page function in versions up to, and including, 2.5.1. This makes it possible for authenticated attackers, with administrator-level privileges and above, to upload...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free