CVE-2026-8133 | zyx0814 FilePress up to 2.2.0 Shares Filelist API dzz/shares/admin.php order sql injection (Issue 70)

A vulnerability categorized as critical has been discovered in zyx0814 FilePress up to 2.2.0. Affected by this vulnerability is an unknown functionality of the file dzz/shares/admin.php of the component Shares Filelist API. Such manipulation of the argument order leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-8133. The attack can be launched remotely. Moreover, an exploit is present.

A patch should be applied to remediate this issue.