Mitchell Bennis vulnerabilities

Products

• Simple File List 20

Newest

• mitchell bennis simple file list WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability CVE-2026-39792 8.6 HighOctober 6, 2026
• mitchell bennis simple file list Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File Description CVE-2026-16617 8.8 HighAugust 19, 2026
• mitchell bennis simple file list Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal CVE-2026-16616 8.6 HighAugust 19, 2026
• mitchell bennis simple file list WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-57382 7.1 HighJuly 13, 2026
• eemitch simple file list Simple File List <= 6.3.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute CVE-2026-12119 6.5 MediumJune 20, 2026
• eemitch simple file list Simple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action CVE-2026-11912 Public exploit 7.5 HighJune 20, 2026
• eemitch simple file list Simple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter CVE-2026-11911 7.5 HighJune 20, 2026
• mitchell bennis simple file list WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability CVE-2026-24953 6.5 MediumFebruary 20, 2026
• mitchell bennis simple file list WordPress Simple File List plugin <= 6.1.18 - Broken Access Control vulnerability CVE-2025-68591 5.4 MediumDecember 24, 2025
• mitchell bennis simple file list WordPress Simple File List plugin <= 6.1.14 - Arbitrary File Download vulnerability CVE-2025-54021 7.5 HighAugust 20, 2025
• eemitch simple file list Simple File List < 4.2.3 - Remote Code Execution CVE-2020-36847 Public exploit EPSS 43.5% 9.8 CriticalJuly 12, 2025
• mitchell bennis simple file list WordPress Simple File List plugin <= 6.1.13 - Settings Change Vulnerability CVE-2025-47450 5.3 MediumMay 7, 2025
• mitchell bennis simple file list Simple File List < 6.1.13 - Reflected Cross-Site Scripting CVE-2024-10146 5.4 MediumNovember 14, 2024
• mitchell bennis simple file list WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Arbitrary File Deletion CVE-2023-44227 7.5 HighApril 17, 2024
• mitchell bennis simple file list WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Cross Site Scripting (XSS) CVE-2023-39924 5.9 MediumOctober 24, 2023
• mitchell bennis simple file list Simple File List < 6.0.10 - Admin+ Stored XSS CVE-2023-1025 4.8 MediumMarch 27, 2023
• mitchell bennis simple file list, simplefilelist simple-file-list +1 more Simple File List < 4.4.13 - Page Creation via CSRF CVE-2022-3208 6.5 MediumOctober 10, 2022
• mitchell bennis simple file list, simplefilelist simple-file-list +1 more Simple File List < 4.4.12 - Admin+ Stored Cross-Site Scripting CVE-2022-3207 4.8 MediumOctober 10, 2022
• mitchell bennis simple file list, simplefilelist simple-file-list +1 more Simple File List < 4.4.12 - Reflected Cross-Site Scripting CVE-2022-3062 EPSS 44.1% 6.1 MediumSeptember 26, 2022
• eemitch simple file list, simplefilelist simple-file-list +1 more Simple File List <= 3.2.7 - Arbitrary File Download CVE-2022-1119 Public exploit EPSS 20.0% 7.5 HighApril 19, 2022