Simplefilelist Simple File List — known CVE vulnerabilities

Every CVE whose affected-product data names Simplefilelist Simple File List, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-36847 — CVSS 9.8 (critical): The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename…
• CVE-2023-39924 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mitchell Bennis Simple File List plugin <= 6.1.9 versions.
• CVE-2024-10146 — CVSS 5.4 (medium): The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it back in an attribute…
• CVE-2023-1025 — CVSS 4.8 (medium): The Simple File List WordPress plugin before 6.0.10 does not sanitise and escape some of its settings, which could allow high privilege…