Login Request a demo
SF
Product
Simple File List
by Simplefilelist · last CVE Jul 12, 2025
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 1Medium 6Low 0
Severity
All severities9Critical2High1Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Simple File List to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-36847
9.8
44%
Jul 12
Simple File List < 4.2.3 - Remote Code Execution
Affected: before 4.2.3
CVE-2020-12832
9.8
7%
May 13
WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify…
Affected: before 4.2.8
CVE-2022-1119
7.5
20%
Apr 19
The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php file due to missing controls…
Affected: before 3.2.8
CVE-2022-3208
6.5
0%
Oct 10
Simple File List < 4.4.13 - Page Creation via CSRF
Affected: before 4.4.12
CVE-2022-3062
6.1
44%
Sep 26
The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting
Affected: before 4.4.12
CVE-2024-10146
5.4
1%
Nov 14
Simple File List < 6.1.13 - Reflected Cross-Site Scripting
Affected: before 6.1.13
CVE-2023-39924
4.8
0%
Oct 25
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mitchell Bennis Simple File List plugin <= 6.1.9 versions
Affected: through 6.1.9
CVE-2023-1025
4.8
0%
Mar 27
The Simple File List WordPress plugin before 6.0.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
Affected: before 6.0.10
CVE-2022-3207
4.8
1%
Oct 10
Simple File List < 4.4.12 - Admin+ Stored Cross-Site Scripting
Affected: before 4.4.12
Showing 9