WordPress File Sharing Plugin, be7e4dd904232f8bbad7f0fdb3ba196d889265d6

CVE, Research URL: be7e4dd904232f8bbad7f0fdb3ba196d889265d6
Home page URL: Security reports for WordPress File Sharing Plugin
Application: WordPress File Sharing Plugin
Published on: Aug 06, 2022
Research Description: Secure Client Portal and Private File Sharing Plugin – User Private Files [user-private-files] < 1.1.1 Frontend File Manager & Sharing – User Private Files <= 1.1.0 - Sensitive Information Disclosure The Frontend File Manager & Sharing – User Private Files plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 1.1.0 via the dpk_upvf_uemail_search() function. This can allow unauthenticated attackers to extract sensitive data including user emails.
Affected versions: max 1.1.1.
Status: vulnerable