Does Secure Private Files have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is Secure Private Files compatible with WordPress 6.9.4?

According to WordPress.org data, Secure Private Files 1.0.3 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

Is Secure Private Files compatible with PHP 7.4+?

Secure Private Files requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Secure Private Files updated?

Secure Private Files was last updated on Feb 11, 2026. Frequent updates are generally a positive security signal.

What is Secure Private Files's security score?

Secure Private Files has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Secure Private Files Security & Risk Analysis

wordpress.org/plugins/ankit-secure-private-files

Secure private file access with expiry, role-based permissions, token-based URLs, and detailed download logs.

0 active installs v1.0.3 PHP 7.4+ WP 6.0+ Updated Feb 11, 2026

access-controldownload-managerfile-managermembershipsecurity

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Secure Private Files Safe to Use in 2026?

Generally Safe

Score 100/100

Secure Private Files has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago

Risk Assessment

The "ankit-secure-private-files" plugin v1.0.3 exhibits a generally good security posture with some notable exceptions. The absence of known vulnerabilities and a strong adherence to using prepared statements for SQL queries are positive indicators. Furthermore, a high percentage of properly escaped output and the presence of nonce and capability checks in many areas suggest a developer who is aware of common security practices. The lack of file operations and external HTTP requests also reduces potential attack vectors.

Key Concerns

AJAX handler without authentication check
Potential for unescaped output in 10% of cases

Vulnerabilities

None known

Secure Private Files Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Secure Private Files Release Timeline

v1.0.3Current

v1.0.2

Code Analysis

Analyzed Apr 6, 2026

Secure Private Files Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

28 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Select2

Output Escaping

90% escaped31 total outputs

Data Flows · Security

All sanitized

Data Flow Analysis

1 flows

<ankit-secure-private-files> (ankit-secure-private-files.php:0)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

1 unprotected

Secure Private Files Attack Surface

Entry Points3

Unprotected1

AJAX Handlers 1

authwp_ajax_pf_search_usersankit-secure-private-files.php:208

Shortcodes 2

[my_ankit_files] ankit-secure-private-files.php:466

[secure_files] ankit-secure-private-files.php:467

WordPress Hooks 11

actioninitankit-secure-private-files.php:30

actioncurrent_screenankit-secure-private-files.php:45

actionadmin_enqueue_scriptsankit-secure-private-files.php:57

actionadd_meta_boxesankit-secure-private-files.php:114

actionsave_post_ankit_filesankit-secure-private-files.php:242

actioninitankit-secure-private-files.php:296

filterquery_varsankit-secure-private-files.php:298

actiontemplate_redirectankit-secure-private-files.php:306

filtermanage_ankit_files_posts_columnsankit-secure-private-files.php:475

actionmanage_ankit_files_posts_custom_columnankit-secure-private-files.php:481

filtermanage_edit-ankit_files_sortable_columnsankit-secure-private-files.php:504

Maintenance & Trust

Secure Private Files Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedFeb 11, 2026

PHP min version7.4

Downloads416

Community Trust

Rating0/100

Number of ratings0

Active installs0

Alternatives

Secure Private Files Alternatives

LCK cloud Connector

lck-cloud-connector

100

Easily restrict access to your existing WordPress pages and posts. Official connector to build secure membership sites with LCK cloud.

0 No CVEs

Download Manager

download-manager

This File Management & Digital Store plugin will help you to control file downloads & sell digital products from your WP site.

100K 79 CVEs

Download Monitor

download-monitor

Powerful Download Manager Plugin for WordPress

90K 29 CVEs

Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More

content-control

Restrict content based on login status, user roles, device type & more. Monetize your content with a paywall or members-only content.

40K 4 CVEs

Groups

groups

Groups is an efficient and powerful solution, providing group-based user membership management, group-based capabilities and content access control.

10K 2 CVEs

Developer Profile

Secure Private Files Developer Profile

Ankit Patel

3 plugins · 50 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Secure Private Files

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/ankit-secure-private-files/assets/select2/select2.min.js/wp-content/plugins/ankit-secure-private-files/assets/select2/select2.min.css/wp-content/plugins/ankit-secure-private-files/assets/ankit-secure-private-files-admin.js

Version Parameters

ankit-select2&ver=4.0.13ankit-secure-private-files-admin-js&ver=1.0.3

HTML / DOM Fingerprints

Data Attributes

data-placeholder="Search users…"

JS Globals

PF_Ajax

REST Endpoints

/wp-json/pf_search_users

FAQ