Simple File List

Уязвимости

• CVE-2020-36847без авторизации→ 4.2.3

  Simple File List < 4.2.3 - Remote Code Execution

  Критич. 9.8

• CVE-2020-12832без авторизации

  WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the applicatio

  Критич. 9.8

• CVE-2026-11912без авторизации≤ 6.3.7

  Simple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action

  Высокий 7.5

• CVE-2026-11911без авторизации≤ 6.3.7

  Simple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter

  Высокий 7.5

• CVE-2025-54021без авторизации≤ 6.1.14

  WordPress Simple File List plugin <= 6.1.14 - Arbitrary File Download vulnerability

  Высокий 7.5

• CVE-2023-44227без авторизации≤ 6.1.9

  WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Arbitrary File Deletion

  Высокий 7.5

• CVE-2022-1119без авторизации≤ 3.2.7

  Simple File List <= 3.2.7 - Arbitrary File Download

  Высокий 7.5

• CVE-2026-57382без авторизации · нужен клик≤ 6.3.8

  WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-24953нужен вход≤ 6.1.15

  WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability

  Средний 6.5

• CVE-2026-12119участник+≤ 6.3.7

  Simple File List <= 6.3.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via '

  Средний 6.5

• CVE-2025-68591нужен вход≤ 6.1.18

  WordPress Simple File List plugin <= 6.1.18 - Broken Access Control vulnerability

  Средний 5.4

• CVE-2025-47450без авторизации≤ 6.1.13

  WordPress Simple File List plugin <= 6.1.13 - Settings Change Vulnerability

  Средний 5.3

• CVE-2023-39924админ≤ 6.1.9

  WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Cross Site Scripting (XSS)

  Средний 4.8