SI
Vendor
Simplefilelist
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-36847 | SF Simple File List Simplefilelist | 9.8 | Jul 12 | Simple File List < 4.2.3 - Remote Code Execution |
| CVE-2024-10146 | SF Simple File List Simplefilelist | 5.4 | Nov 14 | Simple File List < 6.1.13 - Reflected Cross-Site Scripting |
| CVE-2023-39924 | SF Simple File List Simplefilelist | 4.8 | Oct 25 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mitchell Bennis Simple File List plugin <= 6.1.9 versions |
| CVE-2023-1025 | SF Simple File List Simplefilelist | 4.8 | Mar 27 | The Simple File List WordPress plugin before 6.0.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… |
| CVE-2022-3208 | SI Simple-file-list Simplefilelist | 6.5 | Oct 10 | Simple File List < 4.4.13 - Page Creation via CSRF |
| CVE-2022-3207 | SI Simple-file-list Simplefilelist | 4.8 | Oct 10 | Simple File List < 4.4.12 - Admin+ Stored Cross-Site Scripting |
| CVE-2022-3062 | SI Simple-file-list Simplefilelist | 6.1 | Sep 26 | The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting |
| CVE-2022-1119 | SI Simple-file-list Simplefilelist | 7.5 | Apr 19 | The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php file due to missing controls… |
| CVE-2020-12832 | SI Simple-file-list Simplefilelist | 9.8 | May 13 | WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify… |