deepakkite
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| File Sharing & Download Manager – User Private Files | 3 | – | Feb 19, 2025 |
| Secure Client Portal and Private File Sharing Plugin – User Private Files | 1 | – | Jun 16, 2026 |
Exploited and recent CVEs
- CVE-2026-10093 File Sharing & Download Manager <= 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'fldr_ttl' Parameter 0.2%
- CVE-2024-13799 User Private Files – File Upload & Download Manager with Secure File Sharing <= 2.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting 0.3%
- CVE-2024-7848 User Private Files <= 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private File Access 0.3%
- CVE-2023-4636 WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting 1.0%