Simplefilelist vulnerabilities

Products

• Simple-file-list 5
• Simple File List 4

Newest

• eemitch simple file list Simple File List < 4.2.3 - Remote Code Execution CVE-2020-36847 Public exploit EPSS 43.5% 9.8 CriticalJuly 12, 2025
• mitchell bennis simple file list Simple File List < 6.1.13 - Reflected Cross-Site Scripting CVE-2024-10146 5.4 MediumNovember 14, 2024
• mitchell bennis simple file list WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Cross Site Scripting (XSS) CVE-2023-39924 5.9 MediumOctober 24, 2023
• mitchell bennis simple file list Simple File List < 6.0.10 - Admin+ Stored XSS CVE-2023-1025 4.8 MediumMarch 27, 2023
• mitchell bennis simple file list, simplefilelist simple-file-list +1 more Simple File List < 4.4.13 - Page Creation via CSRF CVE-2022-3208 6.5 MediumOctober 10, 2022
• mitchell bennis simple file list, simplefilelist simple-file-list +1 more Simple File List < 4.4.12 - Admin+ Stored Cross-Site Scripting CVE-2022-3207 4.8 MediumOctober 10, 2022
• mitchell bennis simple file list, simplefilelist simple-file-list +1 more Simple File List < 4.4.12 - Reflected Cross-Site Scripting CVE-2022-3062 EPSS 44.1% 6.1 MediumSeptember 26, 2022
• eemitch simple file list, simplefilelist simple-file-list +1 more Simple File List <= 3.2.7 - Arbitrary File Download CVE-2022-1119 Public exploit EPSS 20.0% 7.5 HighApril 19, 2022
• simplefilelist simple-file-list The simple-file-list plugin before 4.2.8 for WordPress mishandles a .. sequence within a pathname... CVE-2020-12832 9.8 CriticalMay 13, 2020