Vulnerabilidades de Mitchell Bennis
CVEs publicadas que afetam produtos de Mitchell Bennis: 4 registro(s), com severidade, exploração e correções.
CVE-2026-39792
Alta · 8.6
CWE-22 06/10/2026
WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.
CVE-2026-57382
Alta · 7.1
CWE-79 13/07/2026
WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a through <= 6.3.8.
CVE-2026-24953
Média · 6.5
CWE-22 20/02/2026
WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through <= 6.1.15.
CVE-2025-68591
Média · 5.4
CWE-862 24/12/2025
WordPress Simple File List plugin <= 6.1.18 - Broken Access Control vulnerability
Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple File List: from n/a through <= 6.1.18.