Shared Files – File Upload & Download Manager

Explore Shared Files – File Upload & Download Manager vulnerabilities across all versions. Currently tracking 12 known vulnerabilities, including severity, impact, and patch status.

01234567891015.09.2021Today15.09.20214.8Shared Files – Easy Download Manager and File Sharing Plugin with Frontend File Upload <= 1.6.56 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.8 · 15.09.202118.10.20214.8Shared Files – Easy Download Manager and File Sharing Plugin with Frontend File Upload <= 1.6.60 - Cross-Site Scripting CVSS 4.8 · 18.10.202104.03.20226.3Freemius SDK <= 2.4.2 - Missing Authorization Checks CVSS 6.3 · 04.03.202218.07.20236.1Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get CVSS 6.1 · 18.07.202321.09.20237.2Shared Files <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 21.09.202317.04.20245.3Shared Files <= 1.7.16 - Missing Authorization to Notice Dismissal CVSS 5.3 · 17.04.202407.05.20245.3Shared Files <= 1.7.19 - Missing Authorization CVSS 5.3 · 07.05.202409.08.20245.3Shared Files <= 1.7.28 - Unauthenticated Sensitive Information Exposure CVSS 5.3 · 09.08.202430.01.20257.2Shared Files – Frontend File Upload Form & Secure File Sharing <= 1.7.42 - Limited Unauthenticated Stored Cross-Site Scripting via File Upload CVSS 7.2 · 30.01.202502.06.20257.2Shared Files <= 1.7.48 - Unauthenticated Stored Cross-Site Scripting via sanitize_file Function CVSS 7.2 · 02.06.202530.03.20264.3Shared Files – Frontend File Upload Form & Secure File Sharing < 1.7.58 - Authenticated (Contributor+) Arbitrary File Download CVSS 4.3 · 30.03.202605.06.20265.3Shared Files – Frontend File Upload Form & Secure File Sharing <= 1.7.64 - Unauthenticated Path Traversal CVSS 5.3 · 05.06.2026

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage100%
Open

0

Fixed

12

Get automatic notifications for all Shared Files – File Upload & Download Manager vulnerabilities before they are exploited.

Vulnerability Records

12 records
2026-06-05 00:00CVE-2026-49112
5.3
Medium
kai63001Yes
2026-03-30 00:00CVE-2025-15433
4.3
Medium
Muhammad Rohan KhanYes
2025-06-02 21:07CVE-2025-4392
7.2
High
Martin MartinYes
2025-01-30 17:22CVE-2024-13504
7.2
High
Tim CoenYes
2024-08-09 00:00CVE-2024-43230
5.3
Medium
Abdi PranataYes
2024-05-07 00:00CVE-2024-34438
5.3
Medium
domiee13Yes
2024-04-17 00:00CVE-2024-32679
5.3
Medium
Dhabaleshwar DasYes
2023-09-21 00:00CVE-2023-4819
7.2
High
Zeyad AlshahraniYes
2023-07-18 00:00CVE-2023-33999
6.1
Medium
Rafie MuhammadYes
2022-03-04 00:00CVE-2022-4974
6.3
Medium
AnonymousYes
Showing 1–10 of 12 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C