Shared Files – Frontend File Upload Form & Secure File Sharing

Vulnerabilities 14Slug shared-filesLatest version 1.7.64WordPress.org →

Minimum safe version

1.7.58

Update to 1.7.58 or later to address 14 fixable vulnerabilities

Latest available1.7.64 ✓
Medium 6.8
2026-03-30< 1.7.58

Shared Files – Frontend File Upload Form & Secure File Sharing < 1.7.58 - Authenticated (Contributor+) Arbitrary File Download

WordfenceCVE
High 7.2
2025-06-03< 1.7.49

Shared Files <= 1.7.48 - Unauthenticated Stored Cross-Site Scripting via sanitize_file Function

EUVDWordfenceCVE
Medium 6.3
2024-10-16< 1.6.72

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE
Medium 6.1
2023-10-17< 1.7.6

WordPress Shared Files Plugin < 1.7.6 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
N/A
2023-07-18< 1.7.1

WordPress Shared Files Plugin < 1.7.1 is vulnerable to Cross Site Scripting (XSS)

PatchstackWPScanCVE
N/A
2022-03-04< 1.6.72

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence
N/A
2022-02-28< 1.6.72

WordPress Shared Files plugin < 1.6.72 - Sensitive Information Disclosure vulnerability

Patchstack
N/A
2022-02-28< 1.6.72

WordPress Shared Files plugin < 1.6.72 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack