FilePress vulnerabilities
CVEs whose affected-version data names the FilePress package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111619Medium· 6.5PoCFilePress through 3.0.1 SQL Injection via asc Parameter in filelist.php
FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries…
▾ Twilightzyx0814 · FilePressEPSS 0.42%via CVEORG
CVE-2026-90879High· 7.3PoCA vulnerability was identified in zyx0814 FilePress up to 3.0.1
A vulnerability was identified in zyx0814 FilePress up to 3.0.1. This vulnerability affects unknown code of the file dzz/publish/search.php of the component Publish Module. Such manipulation of the argument orderby/order leads to sql inj…
▾ Midnightzyx0814 · FilePressEPSS 0.43%via NVD