Filr – Secure document library

Filr – Secure document library has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 8 are fixed as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (25%). Other recurring categories include Missing Authorization, Unrestricted Upload Of File With Dangerous Type.

Every one of the 8 issues recorded for Filr – Secure document library has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, one record each. Filr – Secure document library is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Filr – Secure document library vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2026-28133

Filr – Secure document library <= 1.2.13 - Authenticated (Contributor+) Arbitrary File Uploads

Read the full analysis

Vulnerability Records

8 records


2026-02-26 00:00	Filr – Secure document library <= 1.2.13 - Authenticated (Contributor+) Arbitrary File Uploads Filr <= 1.2.13	`CVE-2026-28133`	8.8 High	Que Thanh Tuan	Yes
2026-01-16 14:11	Filr – Secure document library <= 1.2.11 - Authenticated (Administrator+) Stored Cross-Site Scripting via HTML Upload Filr <= 1.2.11	`CVE-2025-14632`	4.4 Medium	Phap Nguyen Anh	Yes
2025-08-17 00:00	Filr <= 1.2.10 - Authenticated (Contributor+) Arbitrary File Deletion Filr <= 1.2.10	`CVE-2025-64230`	8.1 High	Phat RiO	Yes
2024-08-09 00:00	Filr – Secure document library <= 1.2.4 - Authenticated (Editor+) Stored Cross-Site Scripting Filr <= 1.2.4	`CVE-2024-43216`	4.4 Medium	domiee13	Yes
2023-11-13 00:00	Filr – Secure document library <= 1.2.3.5 - Authenticated (Author+) Arbitrary File Upload Filr < 1.2.3.6	`CVE-2023-5762`	8.8 High	Dmitrii Ignatyev	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Filr <= 1.2.2.9	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2022-05-23 00:00	Filr – Secure document library <= 1.2.2 - Missing Authorization Filr < 1.2.2.1	`CVE-2022-1777`	6.4 Medium	dc11	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Filr < 1.2.1	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–8 of 8 reports

Latestv1.2.17

Filr – Secure document library

Author

WP Chill

4.6(17)

92/100

Last Updated

2026-09-11 (2d ago)

Active Installs

700+

Downloads

33,532

Requires WP

3.5+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2020-04-09 (7y ago)

Easily Create a Secure Document Library with Filr Filr helps you safely upload, organize, and share documents on your site. Use direct links or show all files in a library for easy access. Filr Pro – advanced features available after making a purchase Enhanced File Security & Access Control – Support for external files. – Restrict file access by user email or user role. – Encrypt filenames for extra privacy. – Password-protected ZIP files. Flexible File Expiry Options – Expire uploads after a set number of downloads. – Set an expiration date for files to auto-remove access. Advanced Upload & Storage Management – Upload multiple files at once and automatically zip them. – Store files in custom directories for better organization. – Manage folders efficiently with built-in folder management. Extended Shortcode Customization – More options to configure, style, and customize document library shortcodes. Get it now on wpdocumentlibrary.com Documentation Learn more about this plugin [in our official documentation]](https://wpdocumentlibrary.com/kb/) Support Free users: Ask in our forum Pro users: Get priority help

View on WordPress.org