Miniorange Prevent Files \/ Folders Access vulnerabilities

3 vulnerabilities

Known vulnerabilities in Miniorange Prevent Files \/ Folders Access, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2025-53561miniorangeprevent_files_\/_folders_access+1
EPSS score
0.43%
Path Traversal: '.../...//' vulnerability in miniOrange Prevent files / folders access prevent-file-access allows Path Traversal.This issue affects Prevent files / folders access: from n/a through <= 2.6.0.4.3CVE-2026-97267miniorangeprevent_files_\/_folders_access+1
EPSS score
0.21%
Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.7.2CVE-2023-4238miniorangeprevent_files_\/_folders_access+2
EPSS score
1.60%
The Prevent files / folders access WordPress plugin before 2.5.2 does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.