Skip to content
OpenAdvisories

Vendor

deepakkite

4 known vulnerabilities.

Products

File Sharing & Download Manager – User Private Files 3 Secure Client Portal and Private File Sharing Plugin – User Private Files 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-10093

    File Sharing & Download Manager <= 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'fldr_ttl' Parameter

    The File Sharing & Download Manager – User Private Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fldr_ttl' parameter in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. Thi…

    deepakkite Secure Client Portal and Private File Sharing Plugin – User Private Files Web / CMS
  • Medium 6.4
    CVE-2024-13799

    User Private Files – File Upload & Download Manager with Secure File Sharing <= 2.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    The User Private Files – File Upload & Download Manager with Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘new-fldr-name’ parameter in all versions up to, and including, 2.1.3 due to insufficient input sanitiza…

    deepakkite File Sharing & Download Manager – User Private Files Web / CMS
  • Medium 4.3
    CVE-2024-7848

    User Private Files <= 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private File Access

    The User Private Files – WordPress File Sharing Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.0 via the 'dpk_upvf_update_doc' due to missing validation on the 'docid' user controlled ke…

    deepakkite File Sharing & Download Manager – User Private Files Web / CMS
  • Medium 4.4
    CVE-2023-4636 Public exploit

    WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting

    The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    deepakkite File Sharing & Download Manager – User Private Files Web / CMS