File Away Project File Away — known CVE vulnerabilities

Every CVE whose affected-product data names File Away Project File Away, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-2512 — CVSS 9.8 (critical): The File Away plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check and missing file type…
• CVE-2025-2539 — CVSS 7.5 (high): The File Away plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() function in…
• CVE-2023-0431 — CVSS 5.4 (medium): The File Away WordPress plugin through 3.9.9.0.1 does not validate and escape one of its shortcode attributes, which could allow users with…