Product
simplefilelist simple file list
9 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2020-36847
CVE-2024-10146
CVE-2023-39924
CVE-2023-1025
CVE-2022-3208
CVE-2022-3207
CVE-2022-3062
CVE-2022-1119
CVE-2020-12832
< 4.2.3
The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the r
< 6.1.13
The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it back in an a
<= 6.1.9
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mitchell Bennis Simple File List plugin <= 6.1.9 versions.
< 6.0.10
The Simple File List WordPress plugin before 6.0.10 does not sanitise and escape some of its settings, which could allow high priv
< 4.4.12
The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged
< 4.4.12
The Simple File List WordPress plugin before 4.4.12 does not sanitise and escape some of its settings, which could allow high priv
< 4.4.12
The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes, leading
< 3.2.8
The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/
< 4.2.8
WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the