Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.8 CVE-2020-36847EPSS 18% The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename function whic…

Simple File List 4.2.3+ Fix from $2,3002025-07-12 MEDIUM 5.4 CVE-2024-10146 The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it back in an attribute, leading t…

Simple File List 6.1.13+ Fix from $1,6002024-11-14 MEDIUM 6.5 CVE-2022-3208 The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new…

Simple File List 4.4.12+ Fix from $1,6002022-10-10 MEDIUM 6.1 CVE-2022-3062EPSS 44% The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes, leading to Reflected Cross-…

Simple File List 4.4.12+ Fix from $1,6002022-09-26 HIGH 7.5 CVE-2022-1119EPSS 20% The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php fil…

Simple File List 3.2.8+ Fix from $1,9502022-04-19 CRITICAL 9.8 CVE-2020-12832EPSS 7% WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails t…

Simple File List 4.2.8+ Fix from $2,3002020-05-13