Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Prevent Direct Access – Protect WordPress Files 2.8.8.2

  • Severity: medium-risk
  • Status: Fixed
  • Publication: April 24, 2025

The Prevent Direct Access – Protect WordPress Files plugin for WordPress has a security issue that allows unauthorized individuals to access and change data. This is due to a mistake in how the plugin checks for permissions. This vulnerability exists in versions 2.8.6 to 2.8.8.2, and it means that someone with Contributor-level access or higher can manipulate the protection settings for media files.

Detected in:

PDA – Prevent Direct Access | #1 WordPress File Protection Plugin fixed vulnerable versions:
PDA: Prevent Direct Access to Files, URLs & Folders; Create Private/Secure Links fixed vulnerable versions:
Prevent Direct Access – Protect WordPress Files fixed vulnerable versions: >= 2.8.6 <= 2.8.8.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.