What’s Vulnerable › Products
User Private Files vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your User Private Files version is affected
Latest User Private Files vulnerabilities
- CVE-2026-97331 — User Private Files < 2.1.9 - Subscriber+ User Email Address Disclosure via dpk_upvf_rmv_access (CVSS 4.3)
- CVE-2026-97332 — User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite) (CVSS 5.3)