Zyx0814 Filepress
4 CVEs affecting Zyx0814 Filepress. Latest disclosed: 2026-10-30. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-90879 | High | 7.3 | 2026-09-15 | A vulnerability was identified in zyx0814 FilePress up to 3.0.1. This vulnerability affects unknown code of the file dzz/publish/search.php of the component Pu… |
CVE-2026-8133 | High | 7.3 | 2026-05-08 | A security vulnerability has been detected in zyx0814 FilePress up to 2.2.0. Affected by this vulnerability is an unknown functionality of the file dzz/shares/… |
CVE-2026-111619 | Medium | 6.5 | 2026-10-16 | FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unval… |
CVE-2026-119657 | Medium | 5.0 | 2026-10-30 | FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folder… |