Skip to main content

Shared Files CVE-2024-43230

MEDIUM
Insertion of Sensitive Information Into Sent Data (CWE-201)
2024-08-26 audit@patchstack.com
WordPress Information Disclosure Shared Files Wordpress Plugin
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

4
Severity Changed
Apr 23, 2026 - 15:22 NVD
HIGH MEDIUM
CVSS changed
Apr 23, 2026 - 15:22 NVD
7.5 (HIGH) 5.3 (MEDIUM)
CVE Published
Aug 26, 2024 - 21:15 nvd
HIGH 7.5
CVE Published
Aug 26, 2024 - 21:15 cve.org
MEDIUM 5.3

DescriptionCVE.org

Insertion of Sensitive Information Into Sent Data vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.28.

AnalysisAI

Insertion of Sensitive Information Into Sent Data vulnerability in Anssi Laitila Shared Files shared-files.7.28. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-201. Insertion of Sensitive Information Into Sent Data vulnerability in Anssi Laitila Shared Files shared-files.7.28. Affected products include: Sharedfilespro Shared Files.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Shared Files

View all
CVE-2026-12513 MEDIUM POC
6.8 Aug 28

Arbitrary file deletion via path traversal in the Shared Files and Shared Files Pro WordPress plugins (versions before 1
CVE-2025-15433 MEDIUM POC
6.8 Mar 26

The Shared Files WordPress plugin before version 1.7.58 contains a path traversal vulnerability that allows attackers wi
CVE-2023-4819 MEDIUM POC
6.1 Oct 16

The Shared Files WordPress plugin before 1.7.6 does not return the right Content-Type header for the specified uploaded

CVE-2026-12514 MEDIUM POC
5.3 Aug 28

Unauthenticated file upload in the Shared Files (before 1.7.67) and Shared Files Pro (before 1.7.70) WordPress plugins e
CVE-2021-24856 MEDIUM POC
4.8 Nov 17

The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which c
CVE-2021-24736 MEDIUM POC
4.8 Oct 18

The Easy Download Manager and File Sharing Plugin with frontend file upload - a better Media Library - Shared Files Word
CVE-2026-49112 HIGH
7.5 Jun 15

Unauthenticated path traversal in the Shared Files WordPress plugin (versions 1.7.64 and earlier) allows remote attacker
CVE-2026-78269 MEDIUM
6.4 Aug 24

Server-Side Request Forgery in the Shared Files WordPress plugin (versions up to and including 1.7.69) allows authentica

Same weakness CWE-201 – Insertion of Sensitive Information Into Sent Data

View all
CVE-2026-39912 CRITICAL POC
9.1
CVE-2021-26566 CRITICAL POC
9.0
CVE-2025-60188 HIGH POC
7.5
CVE-2024-43283 MEDIUM POC
5.3
CVE-2020-37150 HIGH POC
7.5
CVE-2024-32825 HIGH POC
7.5
CVE-2025-31134 HIGH POC
7.5
CVE-2026-47717 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2024-43230 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy