Shared Files
Approved changes feed: RSS · Atom
cpe:2.3:a:tammersoft:shared_files:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Tammersoft (c5925c27-7ff7-55f6-beff-7544e882ad87) |
|---|---|
| Product | Shared Files (4d1dbdd0-b6a5-543c-bcc5-ee7469b2f118) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4819 |
vulnerable | 2026-06-08 06:16:14.662198 |
Shared Files < 1.7.6 - Unauthenticated Stored Cross-Site Scripting
The Shared Files WordPress plugin before 1.7.6 does not return the right Content-Type header for the specified uploaded file. Therefore, an attacker can upload an allowed file extension injected with malicious scripts.
Published: 2023-10-16T19:38:55.423Z
Updated: 2025-04-23T16:14:38.486Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24856 |
vulnerable | 2026-06-08 05:30:39.359860 |
Shared Files < 1.6.61 - Admin+ Stored Cross-Site Scripting
The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Published: 2021-11-17T10:16:00.000Z
Updated: 2024-08-03T19:42:17.305Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24736 |
vulnerable | 2026-06-08 05:30:39.110106 |
Shared Files < 1.6.57 - Admin+ Stored Cross-Site Scripting
The Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files WordPress plugin before 1.6.57 does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues.
Published: 2021-10-18T13:46:06.000Z
Updated: 2024-08-03T19:42:16.864Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.