Tammersoft Shared Files vulnerabilities

5 vulnerabilities

Known vulnerabilities in Tammersoft Shared Files, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2021-24736tammersoftshared_files+2
EPSS score
0.64%
The Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files WordPress plugin before 1.6.57 does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues.4.8CVE-2021-24856tammersoftshared_files+2
EPSS score
0.67%
The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed7.5CVE-2026-49112tammersoftshared_files+1
EPSS score
0.50%
Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions.6.4CVE-2026-78269tammersoftshared_files+1
EPSS score
0.23%
Contributor Server Side Request Forgery (SSRF) in Shared Files <= 1.7.69 versions.7.2CVE-2023-4819tammersoftshared_files+2
EPSS score
0.49%
The Shared Files WordPress plugin before 1.7.6 does not return the right Content-Type header for the specified uploaded file. Therefore, an attacker can upload an allowed file extension injected with malicious scripts.