Prevent Files / Folders Access
Healthy: vulnerability published 30 Sep 2026, fixed in 2.6.8.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 2.6.8. Update to version 2.6.8 or later.30 Sep 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 8 Sep 2019 to 8 Sep 2019, 1 commits |
|---|---|
| cyberlord92 | 10 Sep 2019 to 28 Jan 2022, 21 commits |
| karnisingh123 | 22 Apr 2022 to 22 Apr 2022, 1 commits |
| cyberorange | 25 May 2022 to 4 Apr 2024, 11 commits |
| teamwpminiorange | 20 May 2025 to 28 May 2026, 6 commits |
| mowpsamldev | 8 Jul 2026 to 12 Oct 2026, 8 commits |
New committer mowpsamldev made a first commit on 8 Jul 2026.
Maintenance
- Last release
- 23 days ago
- Releases, 24 months
- 10
- Tested up to
- 7.1 current
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 2 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 2 |
| Q3 2026 | 5 |
| Q4 2026 | 1 |
Last release 12 Oct 2026. Tested with WordPress 7.1 (current).
Support
0% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 30 Sep 2026 | Prevent Files / Folders Access <= 2.6.7 - Missing Authorization | 4.3 | <= 2.6.7 | 2.6.8 | 0 |
| 6 Aug 2025 | Prevent files / folders access <= 2.6.0 - Authenticated (Subscriber+) Path Traversal | 4.3 | <= 2.6.0 | 2.6.1 | 0 |
| 28 Aug 2023 | Prevent files / folders access <= 2.5.1 - Authenticated (Administrator+) Arbitrary File Upload in mo_media_restrict_page | 7.2 | <= 2.5.1 | 2.5.2 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.6 from 35 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 30 |
|---|---|
| 4 star | 2 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 3 |
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 114 |
|---|---|
| 11 May 2026 | 186 |
| 18 May 2026 | 179 |
| 25 May 2026 | 757 |
| 1 Jun 2026 | 265 |
| 8 Jun 2026 | 203 |
| 15 Jun 2026 | 163 |
| 22 Jun 2026 | 149 |
| 29 Jun 2026 | 145 |
| 6 Jul 2026 | 825 |
| 13 Jul 2026 | 299 |
| 20 Jul 2026 | 223 |
| 27 Jul 2026 | 229 |
| 3 Aug 2026 | 220 |
| 10 Aug 2026 | 156 |
| 17 Aug 2026 | 170 |
| 24 Aug 2026 | 910 |
| 31 Aug 2026 | 299 |
| 7 Sep 2026 | 257 |
| 14 Sep 2026 | 942 |
| 21 Sep 2026 | 1,853 |
| 28 Sep 2026 | 456 |
| 5 Oct 2026 | 349 |
| 12 Oct 2026 | 1,134 |
| 19 Oct 2026 | 497 |
| 26 Oct 2026 | 416 |
| 2 Nov 2026 | 58 |
Weekly downloads over the last 4 weeks are 24% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 2.7.0 |
|---|---|
| Author | miniOrange |
| Added | 10 Sep 2019 |
| Last updated | 12 Oct 2026 |
| Active installs | 1,000+ |
| Requires WordPress | 4.7 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.6 |
| Category | Security & Privacy > Security Scanning & Malware Protection |
| Tags | secure files, protect-folders, protect uploads, media restriction, content restriction |
Other plugins by this author: miniOrange 2FA - Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator), Social Login, Social Sharing by miniOrange, JWT Authentication for WP REST APIs, SAML Single Sign On - SSO Login, Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents, OAuth Single Sign On - SSO (OAuth Client), Password Policy Manager, miniOrange OTP Login, Verification and SMS Notifications, Active Directory Integration / LDAP Integration, Custom API for WP, WP OAuth Server ( Login with WordPress ), Page and Post Restriction
Questions
Is Prevent Files / Folders Access still maintained?
Prevent Files / Folders Access was last updated on 12 Oct 2026. Its Canary status is Healthy.
Is Prevent Files / Folders Access safe?
Prevent Files / Folders Access has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Prevent Files / Folders Access?
The wordpress.org author is miniOrange. Recent committers: mowpsamldev, teamwpminiorange, cyberorange, karnisingh123, cyberlord92. New committer mowpsamldev made a first commit on 8 Jul 2026.
What can I use instead of Prevent Files / Folders Access?
Plugins in the same category with a higher Canary Score: IP Location Block, Wordfence Security - Firewall, Malware Scan, and Login Security, Sucuri Security - Auditing, Malware Scanner and Security Hardening, WP Content Copy Protection & No Right Click, NinjaFirewall (WP Edition) - Advanced Security Plugin and Firewall.