CVE Intelligence

Mitchell Bennis Simple File List vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mitchell Bennis Simple File List: 4 record(s), with affected versions and fixes.

CVE-2026-39792 High · 8.6 CWE-22 Oct 6, 2026
WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.
CVE-2026-57382 High · 7.1 CWE-79 Jul 13, 2026
WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a through <= 6.3.8.
CVE-2026-24953 Medium · 6.5 CWE-22 Feb 20, 2026
WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through <= 6.1.15.
CVE-2025-68591 Medium · 5.4 CWE-862 Dec 24, 2025
WordPress Simple File List plugin <= 6.1.18 - Broken Access Control vulnerability
Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple File List: from n/a through <= 6.1.18.