Eemitch vulnerabilities
We track 3 vulnerabilities in Eemitch products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 20, 2026.
Latest Eemitch vulnerabilities
- 7.5 High severity
Simple File List: Missing Authorization
The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization checks in all versions up to, and including, 6.3.7. This makes it possible for unauthenticated attackers to delete and modify files on the
- 7.5 High severity
Simple File List: Improper Limitation of a Pathname to a Restricted Directory
The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the eeSFL_DeleteFile function in all versions up to, and including, 6.3.7. This makes it possible for unauthenticated attackers to de
- 7.5 High severity
Simple File List: Improper Limitation of a Pathname to a Restricted Directory
The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php file due to missing controls which makes it possible unauthenticated attackers to supply a path to a file that wil