Apos37 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Apos37 products: 1 record(s), with severity, exploitation and fixes.

ERI File Library 1

Exploited only (KEV) →

CVE-2025-12041 Medium · 5.3 CWE-862 Oct 31, 2025

ERI File Library <= 1.1.0 - Missing Authorization to Unauthenticated Protected File Download

The ERI File Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'erifl_file' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to download files restricted to specific user roles.