Known vulnerabilities in Unknown User Private Files
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-97331 | The User Private Files WordPress plugin before 2.1.9 does not validate that a supplied user belongs to the document… | 4.3 Medium | Oct 7, 2026 |
| CVE-2026-97332 | The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite… | 5.3 Medium | Oct 4, 2026 |