User Private Files – WordPress File Sharing Plugin

74 Quality Score

Active Installs

14/30

With about 1,000 active installs it is a niche plugin rather than a mainstream choice, but the score is boosted by strong ratings relative to its small user base.

Update Freshness

25/25

It was updated on 2026-07-07 and is tested against WordPress 7.0, which signals an actively maintained codebase.

User Rating

13/15

A 90 out of 100 from 55 reviewers is a strong satisfaction score and indicates most users are happy with the result.

Support Health

8/15

There are zero support threads and zero resolutions, which is technically a clean record but also means there is no visible public track record of helping users through problems.

WP Compatibility

15/15

It requires WordPress 6.0 and PHP 7.4 and is tested up to WordPress 7.0, so it covers the current supported range cleanly.

Scores higher than 34% of indexed plugins

About

A secure file share plugin for WordPress. Upload files to your clients and let clients securely upload files back to you.

Active Installs 1k+

Rating ★★★★ 4.4/5

Last Updated 2026-09-11 8:01am GMT

Requires WordPress 6.0+

Tested Up To 7.1

Requires PHP 7.4+

Security History

8 known vulnerabilities, all patched

1 High 7 Medium

Most recent: June 15, 2026

View details ▸

File Sharing & Download Manager <= 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'fldr_ttl' Parameter Medium

June 15, 2026 Patched in ["2.1.7"] CVE-2026-10093

User Private Files – File Upload & Download Manager with Secure File Sharing <= 2.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting Medium

February 18, 2025 Patched in ["2.1.4"] CVE-2024-13799

User Private Files <= 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private File Access Medium

August 21, 2024 Patched in ["2.1.1"] CVE-2024-7848

User Private Files < 2.0.5 - Insecure Direct Object Reference Medium

October 11, 2023 Patched in ["2.0.5"] CVE-2023-4836

WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

September 4, 2023 Patched in ["2.0.4"] CVE-2023-4636

Frontend File Manager & Sharing – User Private Files <= 1.1.1 - Missing Authorization Medium

August 6, 2022 Patched in ["1.1.2"]

Frontend File Manager & Sharing – User Private Files <= 1.1.0 - Sensitive Information Disclosure Medium

August 6, 2022 Patched in ["1.1.1"]

Frontend File Manager & Sharing – User Private Files <= 1.1.2 - Subscriber+ Arbitrary File Upload High

July 11, 2022 Patched in ["1.1.3"] CVE-2022-2356

What It Does

This plugin turns a WordPress site into a private client portal where logged-in users can upload, manage, and share documents with one another. Files are gated behind user accounts, making it useful for sending sensitive deliverables to specific clients without exposing them to the public web. It functions as both a document library and a per-user file sharing tool.

Who It's For

It is best for small consultancies, freelancers, agencies, accountants, and legal or coaching practices that need a simple way to exchange confidential files with individual clients through WordPress. Site owners running a B2B service where each customer needs a private, password-protected space for documents will get the most out of it. It is not aimed at large enterprises or public-facing download portals.

Who Should Skip It

If you only need a public download manager or a media library tool for visitors, this is overkill and the alternatives below will serve you better. Anyone who needs front-end file management without requiring users to log in should also skip it.

The Bottom Line

User Private Files delivers a focused client portal experience with strong ratings, recent updates, and modern WordPress compatibility, earning a PluginCheck quality score of 74.43 out of 100. The main caution is its small install base and lack of visible public support activity, so buyers should be comfortable relying on documentation rather than community troubleshooting. It is a solid pick for small service businesses that need a private document exchange and do not require the scale or feature depth of the larger alternatives.

Related Plugins

Download Monitor 90/100

Pick this when you need a mature, widely deployed public download manager with 80,000 installs and a much larger community.

Advanced File Manager 84/100

Pick this when you want a full front-end file manager with 100,000 installs rather than a client-gated portal.

Download Manager 82/100

Pick this when you need advanced download tracking, monetization, or access control rules at scale with 100,000 installs.

Jetpack CRM 80/100

Pick this when your client file sharing is part of a larger CRM, invoicing, and lead management workflow.

Document Embedder 80/100

Pick this when your main goal is embedding PDFs and Office documents inline in posts rather than gating file downloads behind user logins.