ERI File Library icon

ERI File Library

ERI File Library is a WordPress plugin with the following stats:

  • #14,178 Global Rank
  • 10+ active installs
  • Since 2025 1 years active

PF Score (About PF Scores)

PF Score is not a quality guarantee. It is a ranking based on available public signals.

Bronze51.8
Platinum
Gold
Silver
Bronze
Low

Score Breakdown

16.7
Popularity 40% 10+ active installs
60
Reputation 35% No ratings yet
96.6
Freshness 25% Updated 1 months ago

No active penalty — 1 historical CVE, resolved — details

Download Trends

Loading download data…

Vulnerabilities

1 Total
1 Patched
0 Active
100% Resolved rate
CWE-862 · Missing Authorization

The ERI File Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'erifl_file' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to download files restricted to specific user roles.

5.3 Medium Affected All – 1.1.0 Patched in ✓ 1.1.1 Published 30 Oct 2025 CVE CVE-2025-12041

Vulnerability data provided by Wordfence Intelligence (opens in a new tab). CVE data: Copyright 1999–2026 The MITRE Corporation. CVE Terms of Use (opens in a new tab).

About ERI File Library

Easily upload, manage, and track downloads of your shared files

ERI File Library is a simple WordPress plugin designed for effortless file sharing and download tracking. Easily upload and manage your files with a straightforward interface for quick organization and access.

Features

  • Flexible display options: Customize link appearances with various HTML elements and attributes.
  • Shortcodes: Easily integrate downloads into your site with shortcodes.
  • Custom access controls: Restrict downloads by user role or meta key.
  • Detailed tracking: Monitor download counts, track user interactions, and log download dates.

This plugin does not have the option to sell downloads, but it can be integrated with another payment platform by requiring a specific role or meta key to download specific files.

Screenshots

File Library admin list table

File Library admin list table

Adding/editing a file

Adding/editing a file

Tracking downloads - must have user tracking enabled

Tracking downloads - must have user tracking enabled

Downloads report - must have user tracking enabled

Downloads report - must have user tracking enabled

Settings

Settings

Shortcodes with examples 1

Shortcodes with examples 1

Shortcodes with examples 2

Shortcodes with examples 2

Shortcodes with examples 3

Shortcodes with examples 3

Shortcodes with examples 4

Shortcodes with examples 4

Frequently Asked Questions

How do I track downloads?

Download counts are automatically recorded for each file. If you want to additionally track user interactions and dates, you will need to enable it. Navigate to Files > Settings, and select the “Enable User Tracking” option. Doing so will create a new table in your database where each download is logged. “Downloads” and “Report” pages will appear under Files in the admin menu where you can see your collected data.

Are there hooks available for Developers?

Yes, there are plenty. The following hooks are available:
* erifl_download_file_url ( String $url, Array $file, Integer $user_id, String $user_ip ) — Filter the URL for the file when a user is downloading it. $file contains the file data, $user_id is the ID of the user if they are logged in, and $user_ip is the IP address of the user if they are logged out.
* erifl_after_file_downloaded ( Array $file, String $url, Integer $user_id, String $user_ip ) — Action fired after a file has been downloaded. $file contains the file data, $url is the download URL, $user_id is the ID of the user, and $user_ip is the IP address of the user.
* erifl_user_meets_requirements ( Boolean $meets_requirements, Integer $file_id, Integer $user_id, Array $required_roles, String $required_meta_key ) — Filter whether the user meets the requirements for accessing the file. This filter allows modifying the result of the access check based on the user’s roles, meta key values, and any additional custom logic.
* erifl_classes ( Array $classes, Array $file, String $type ) — Filter the classes used in the file download link element. $file contains an array of file data, and $type specifies the type of link being displayed.
* erifl_download_icon ( String $default_icon, String $icon_type, Array $file, String $ext ) — Filter the icon used for file downloads. $icon_type specifies the icon type (e.g., ‘logo-full’, ‘logo-file’, ‘uni’, ‘fa’, ‘cs’), $file contains the file data, and $ext is the file extension.
* erifl_downloaded_count_string ( String $downloaded_string, Integer $count, Array $file ) — Filter the string used to display the download count in the “post” type links. $count is the number of times the file was downloaded, and $file contains the file data.
* erifl_format_specific_prefixes ( Array $format_prefixes, Array $file, String $type ) — Filter the prefixes added to the displayed title of the link based on the file format. $file contains the file data, and $type specifies the link type (e.g., ‘mp3’, ‘mp4’).
* erifl_ip_lookup_path ( String $ip_address_link ) — Filter the link used for looking up a logged-out user’s IP address on the Downloads page.
* erifl_where_used_post_types ( Array $post_types ) — Filter the post types used to look for where the shortcode is used. This feature is located at the bottom of the file edit screen.
* erifl_post_meta ( Array $meta ) — Filter the “post” display type meta html.

Where can I request features and get further support?

We recommend using our website support forum as the primary method for requesting features and getting help. You can also reach out via our Discord support server or the WordPress.org support forum, but please note that WordPress.org doesn’t always notify us of new posts, so it’s not ideal for time-sensitive issues.

Ratings & Reviews

Recent Reviews

Loading reviews…

View all reviews on WordPress.org (opens in a new tab)

Changelog

1.1.5

  • Fix: Downloads failing for logged-out users on cached pages (403 error) due to expired nonces baked into cached HTML.

1.1.4

  • Update: Added taxonomy filters (formats, resource types, target audiences, and any additional taxonomies) to the Report page
  • Update: Report page now exports counts filtered by the selected taxonomy terms
  • Tweak: Replaced the Report page date-range dropdown with a single Filter button matching the Downloads page layout
  • Fix: Additional taxonomy filters on the Downloads page were not being applied or retained after filtering
  • Fix: Filtering by multiple taxonomies on the Downloads page now requires files to match all selected terms instead of any
  • Fix: Duplicate rows appearing in Top Downloads and exported counts caused by duplicate post meta from migration

1.1.3

  • Compatibility: Tested with WordPress 7.0
  • Fix: Where Used feature in file edit screen showing pages where all shortcodes are used, not just for this file

1.1.2

  • Update: Added an option in settings to change the shortcode file class
  • Tweak: Added all classes to the erifl_classes hook
  • Update: Added filters to the reports page when tracking downloads

1.1.1

  • Update: Added a rate limiter with an option in settings to combine limits to all downloads
  • Fix: Unauthorized access due to missing capability check in AJAX action (props Athiwat Tiprasaharn via WordFence Vulnerability Report)

1.1.0

  • Update: New support links

1.0.5

  • Update: Updated author name and website per WordPress trademark policy

1.0.4.1

  • Fix: Test code visible

1.0.4

  • Update: Changed author name from Apos37 to WordPress Enhanced, new Author URI
  • Fix: Optimizations

1.0.3

  • Fix: Translations
  • Fix: About page plugins not showing up on some sites

1.0.2

  • Fix: Requirements from WP.org repo

1.0.1

  • Release to WP.org repo on March 27, 2025
  • Initial release and testing on October 15, 2024

Alternatives to ERI File Library

Other WordPress plugins serving a similar purpose, ranked by relevance and PF Score.

Platinum94.9
GA Google Analytics – Connect Google Analytics to WordPress icon

GA Google Analytics

Embed Google Analytics tracking code and access multiple tracking features for WordPress sites.

★ 4.9/5·400K+ installs·Updated 10 Aug 2026
Platinum93.8
File Manager icon

File Manager

Edit, upload, delete, and manage files and folders from your WordPress dashboard.

★ 4.6/5·1.0M+ installs·Updated 21 Apr 2026
Platinum92.4
FileBird – WordPress Media Library Folders & File Manager icon

FileBird

Create folder structures to organize thousands of WordPress media files and attachments systematically.

★ 4.7/5·200K+ installs·Updated 27 Jul 2026
Platinum91.2
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution icon

Advanced File Manager

Manage WordPress files and create archives directly from your dashboard without using FTP.

★ 4.8/5·100K+ installs·Updated 13 Aug 2026
Platinum90.2
File Manager Pro – Filester icon

File Manager Pro – Filester

Manage WordPress files and edit code directly from the dashboard without FTP access.

★ 4.9/5·100K+ installs·Updated 15 Jul 2026
Platinum89.8
Real Media Library: Media Library Folder & File Manager icon

Real Media Library

Organize WordPress media into folders and collections for simplified file management.

★ 4.8/5·100K+ installs·Updated 2 Jul 2026
Platinum89.3
Broken Link Checker icon

Broken Link Checker

Scan for broken links and images across your site and fix them in bulk from one dashboard.

★ 3.8/5·500K+ installs·Updated 13 Aug 2026
Platinum89.1
Slimstat Analytics icon

Slimstat Analytics

Self-hosted WordPress analytics for pageviews, links, and WooCommerce tracking without external servers.

★ 4.8/5·70K+ installs·Updated 24 Jun 2026
Platinum88.7
Download Monitor icon

Download Monitor

Manage file downloads and digital products with password protection and access controls on WordPress sites.

★ 4.5/5·80K+ installs·Updated 14 Aug 2026
Platinum87.9
WPIDE – File Manager & Code Editor icon

WPIDE – File Manager & Code Editor

Built-in file manager and code editor for WordPress with dashboard access to wp-content folder.

★ 4.8/5·40K+ installs·Updated 27 Jul 2026