Shared Files Pro < 1.7.68 & Shared Files Free < 1.7.67 - Unauthenticated Arbitrary File Deletion
critical
The Shared Files (Free and Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to 1.7.68 (exclusive - pro) and 1.7.67 (free - pro). This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily le...
- CVSS:
- 9.1
(Wordfence)
- Affected:
- up to 1.7.68
- Fixed in:
- 1.7.68
- Disclosed:
- Aug 28, 2026
CVE-2026-12513 on NVD →
Shared Files Pro < 1.7.70 & Shared Files Free < 1.7.67 - Unauthenticated Limited File Upload
medium
The Shared Files (free and pro) – File Upload & Download Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to 1.7.67 (exclusive - free) and 1.7.70 (exclusive - pro). This makes it possible for unauthenticated attackers to upload safe fil...
- CVSS:
- 5.3
(Wordfence)
- Affected:
- up to 1.7.70
- Fixed in:
- 1.7.70
- Disclosed:
- Aug 26, 2026
CVE-2026-12514 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database