Skip to content
PluginCanary

User Private Files - Secure File Sharing and Client Portal Plugin

by Deepak Khokhar · 1,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 5 Oct 2026, fixed in 2.1.9.

86/ 100 Canary Score
Sub-scores for User Private Files - Secure File Sharing and Client Portal Plugin
Ownership100
Maintenance100
Security80
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 2.1.9. Update to version 2.1.9 or later.5 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 2.2.0. Update to version 2.2.0 or later.2 Oct 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master28 Jan 2021 to 28 Jan 2021, 1 commits
deepakkite29 Jan 2021 to 3 Nov 2026, 125 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
yesterday
Releases, 24 months
10
Tested up to
7.1 current
Requires PHP
8.2 supported 8.2+
Releases per quarter for User Private Files - Secure File Sharing and Client Portal Plugin
Q1 20241
Q2 20241
Q3 20242
Q4 20242
Q1 20251
Q2 20251
Q3 20251
Q4 20250
Q1 20260
Q2 20261
Q3 20262
Q4 20263

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

100% of 4 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
5 Oct 2026User Private Files <= 2.1.8 - Authenticated (Subscriber+) Information Exposure4.3<= 2.1.82.1.90
2 Oct 2026User Private Files <= 2.1.0 - Missing Authorization5.3<= 2.1.02.2.00
15 Jun 2026File Sharing & Download Manager <= 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'fldr_ttl' Parameter6.4<= 2.1.62.1.70
18 Feb 2025User Private Files – File Upload & Download Manager with Secure File Sharing <= 2.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 2.1.32.1.40
21 Aug 2024User Private Files <= 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private File Access4.3<= 2.1.02.1.10
11 Oct 2023User Private Files < 2.0.5 - Insecure Direct Object Reference5.3< 2.0.52.0.50
4 Sep 2023WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.0.32.0.40
6 Aug 2022Frontend File Manager & Sharing – User Private Files <= 1.1.1 - Missing Authorization6.3<= 1.1.11.1.20
6 Aug 2022Frontend File Manager & Sharing – User Private Files <= 1.1.0 - Sensitive Information Disclosure5.3<= 1.1.01.1.10
11 Jul 2022Frontend File Manager & Sharing – User Private Files <= 1.1.2 - Subscriber+ Arbitrary File Upload8.8<= 1.1.21.1.30

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.4 from 57 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star47
4 star1
3 star1
2 star1
1 star7

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for User Private Files - Secure File Sharing and Client Portal Plugin
4 May 202647
11 May 2026120
18 May 2026104
25 May 202696
1 Jun 2026103
8 Jun 2026977
15 Jun 2026312
22 Jun 2026180
29 Jun 2026173
6 Jul 20261,008
13 Jul 2026249
20 Jul 2026161
27 Jul 2026169
3 Aug 2026176
10 Aug 2026221
17 Aug 2026209
24 Aug 2026209
31 Aug 2026303
7 Sep 2026276
14 Sep 2026208
21 Sep 2026295
28 Sep 20261,998
5 Oct 2026712
12 Oct 20261,267
19 Oct 2026568
26 Oct 2026485
2 Nov 202663

Weekly downloads over the last 4 weeks are 50% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

PDF Embedder - PDF Viewer & Embed PDF Files for WordPressScore 91 · 300,000+PDF Viewer Block for GutenbergScore 91 · 10,000+Pdf EmbedScore 91 · 10,000+PDF viewer for Elementor & GutenbergScore 91 · 9,000+Wonder PDF EmbedScore 91 · 8,000+

Facts

Version2.2.2
AuthorDeepak Khokhar
Added29 Jan 2021
Last updated3 Nov 2026
Active installs1,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP8.2
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsfile upload, file sharing, client portal, share documents, document library

Other plugins by this author: GIF Master - Awesome GIFs with Giphy and Tenor, Manage User Columns, Easy Accessibility, Social Feeds for Threads, Listings for Buildium, Checker, Dootly - Better Outreach

Questions

Is User Private Files - Secure File Sharing and Client Portal Plugin still maintained?

User Private Files - Secure File Sharing and Client Portal Plugin was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is User Private Files - Secure File Sharing and Client Portal Plugin safe?

User Private Files - Secure File Sharing and Client Portal Plugin has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns User Private Files - Secure File Sharing and Client Portal Plugin?

The wordpress.org author is Deepak Khokhar. Recent committers: deepakkite, plugin-master. We have recorded no ownership change.

What can I use instead of User Private Files - Secure File Sharing and Client Portal Plugin?

Plugins in the same category with a higher Canary Score: PDF Embedder - PDF Viewer & Embed PDF Files for WordPress, PDF Viewer Block for Gutenberg, Pdf Embed, PDF viewer for Elementor & Gutenberg, Wonder PDF Embed.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue