WordPress plugin
ERI File Library security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All ERI File Library vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization to Unauthenticated Protected File Download ≤1.1.0Update to 1.1.1 | CVE-2025-12041 |
- Medium5.3Missing Authorization to Unauthenticated Protected File Download
≤1.1.0Update to 1.1.1
ERI File Library: common questions
Does ERI File Library have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in ERI File Library: 1 medium. None are known to affect version null.
How do I check which version of ERI File Library I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent ERI File Library vulnerability?
CVE-2025-12041, published Oct 30, 2025: ERI File Library <= 1.1.0 - Missing Authorization to Unauthenticated Protected File Download. Severity: Medium (CVSS 5.3).
Is any ERI File Library vulnerability listed in CISA KEV?
No. None of the known ERI File Library vulnerabilities is currently listed in the CISA KEV catalog.