Skip to content
OpenAdvisories

Product · apos37

ERI File Library

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-12041

    ERI File Library <= 1.1.0 - Missing Authorization to Unauthenticated Protected File Download

    The ERI File Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'erifl_file' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to downl…

    apos37 ERI File Library Web / CMS