Filr vulnerabilities | LiveThreat CVE Feed

Product

Filr

by WP Chill · last CVE Mar 5, 2026

CVEs

On KEV

8.5

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 1Low 0

Severity

Exploitation

Watch

Add Filr to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-28133	8.5	0%	Mar 5	WordPress Filr plugin <= 1.2.14 - Arbitrary File Upload vulnerability Affected: through 1.2.14
CVE-2025-64230	7.7	0%	Dec 18	WordPress Filr plugin <= 1.2.10 - Arbitrary File Deletion vulnerability Affected: through 1.2.10
CVE-2024-43216	6.5	0%	Aug 12	WordPress Filr plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability Affected: through 1.2.4