Skip to contentMitchell Bennis Simple File List vulnerabilities
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerabilityCVE-2026-397928.6 High
- mitchell bennis simple file listSimple File List <= 6.3.11 - Unauthenticated Stored XSS via File DescriptionCVE-2026-166178.8 High
- mitchell bennis simple file listSimple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path TraversalCVE-2026-166168.6 High
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2026-573827.1 High
- eemitch simple file listSimple File List <= 6.3.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode AttributeCVE-2026-121196.5 Medium
- eemitch simple file listSimple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX ActionCVE-2026-11912Public exploit7.5 High
- eemitch simple file listSimple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' ParameterCVE-2026-119117.5 High
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerabilityCVE-2026-249536.5 Medium
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.1.18 - Broken Access Control vulnerabilityCVE-2025-685915.4 Medium
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.1.14 - Arbitrary File Download vulnerabilityCVE-2025-540217.5 High
- eemitch simple file listSimple File List < 4.2.3 - Remote Code ExecutionCVE-2020-36847Public exploitEPSS 59.0%9.8 Critical
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.1.13 - Settings Change VulnerabilityCVE-2025-474505.3 Medium
- mitchell bennis simple file listSimple File List < 6.1.13 - Reflected Cross-Site ScriptingCVE-2024-101465.4 Medium
- mitchell bennis simple file listWordPress Simple File List Plugin <= 6.1.9 is vulnerable to Arbitrary File DeletionCVE-2023-442277.5 High
- mitchell bennis simple file listWordPress Simple File List Plugin <= 6.1.9 is vulnerable to Cross Site Scripting (XSS)CVE-2023-399245.9 Medium
- mitchell bennis simple file listSimple File List < 6.0.10 - Admin+ Stored XSSCVE-2023-10254.8 Medium
- mitchell bennis simple file list, simplefilelist simple-file-list +1 moreSimple File List < 4.4.13 - Page Creation via CSRFCVE-2022-32086.5 Medium
- mitchell bennis simple file list, simplefilelist simple-file-list +1 moreSimple File List < 4.4.12 - Admin+ Stored Cross-Site ScriptingCVE-2022-32074.8 Medium
- mitchell bennis simple file list, simplefilelist simple-file-list +1 moreSimple File List < 4.4.12 - Reflected Cross-Site ScriptingCVE-2022-3062EPSS 44.1%6.1 Medium
- eemitch simple file list, simplefilelist simple-file-list +1 moreSimple File List <= 3.2.7 - Arbitrary File DownloadCVE-2022-1119Public exploitEPSS 17.5%7.5 High