Simple File List vulnerabilities
We track 2 vulnerabilities in Simple File List products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 19, 2026.
2vulnerabilities
0critical
2high
0exploited
8.7average CVSS score
Latest Simple File List vulnerabilities
- 8.8 High severity
Simple File List: Improper Neutralization of Input During Web Page Generation
The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users (when front-end file management is enabled) to perform Stored Cross-Sit
- 8.6 High severity
Simple File List: Improper Limitation of a Pathname to a Restricted Directory
The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading