SF
Product
Simple File List
by eemitch · last CVE Jun 20, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch

Add Simple File List to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-36847
9.8
44%
Jul 12
Simple File List < 4.2.3 - Remote Code Execution
Affected: before 4.2.3
CVE-2026-11911
7.5
1%
Jun 20
Simple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter
Affected: through 6.3.7
CVE-2026-11912
7.5
1%
Jun 20
Simple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action
Affected: through 6.3.7
CVE-2026-12119
6.5
0%
Jun 20
Simple File List <= 6.3.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute
Affected: through 6.3.7
Showing 4