WordPress plugin
User Private Files – Secure File Sharing and Client Portal Plugin security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium9
- Low0
All User Private Files – Secure File Sharing and Client Portal Plugin vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Subscriber+ Arbitrary File Upload ≤1.1.2Update to 1.1.3 | CVE-2022-2356 |
- High8.8Subscriber+ Arbitrary File Upload
≤1.1.2Update to 1.1.3
User Private Files – Secure File Sharing and Client Portal Plugin: common questions
Does User Private Files – Secure File Sharing and Client Portal Plugin have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in User Private Files – Secure File Sharing and Client Portal Plugin: 1 high, 9 medium. None are known to affect version null.
How do I check which version of User Private Files – Secure File Sharing and Client Portal Plugin I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent User Private Files – Secure File Sharing and Client Portal Plugin vulnerability?
CVE-2026-97331, published Oct 5, 2026: User Private Files <= 2.1.8 - Authenticated (Subscriber+) Information Exposure. Severity: Medium (CVSS 4.3).
Is any User Private Files – Secure File Sharing and Client Portal Plugin vulnerability listed in CISA KEV?
No. None of the known User Private Files – Secure File Sharing and Client Portal Plugin vulnerabilities is currently listed in the CISA KEV catalog.