455 matches found
Simple File List < 6.1.13 - Reflected Cross-Site Scripting
Simple File List WordPress plugin \u003C 6.1.13 contains a reflected cross-site scripting caused by unsanitized URL output in an attribute, letting attackers execute malicious scripts in admin browsers, exploit requires victim to be an admin. id: CVE-2024-10146 info: name: Simple File List 6.1.13...
WordPress Simple File List - Path Traversal
Simple File List plugin allows path traversal via file upload, enabling files to be written outside the upload directory. id: CVE-2020-12832 info: name: WordPress Simple File List - Path Traversal author: riteshs4hu severity: critical description: | Simple File List plugin allows path traversal v...
Simple File List < 4.4.12 - Cross Site Scripting
The plugin does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting id: CVE-2022-3062 info: name: Simple File List 4.4.12 - Cross Site Scripting author: r3Y3r53 severity: medium description: | The plugin does not escape parameters before...
CVE-2026-124443
The Frappe Framework versions prior to 15.121.1 and 16.x before 16.35.0 are susceptible to a broken access control vulnerability. The flaw exists within File list and report queries , where the system fails to properly restrict private file records. Consequently, authenticated users can query the...
EUVD-2026-119557
Frappe Framework before 15.121.1 and 16.x before 16.35.0 contains a broken access control vulnerability in File list and report queries that fails to restrict private file records to authorized users. Authenticated users can query File list or report views to obtain metadata of private files they...
PT-2026-139959
Frappe Framework before 15.121.1 and 16.x before 16.35.0 contains a broken access control vulnerability in File list and report queries that fails to restrict private file records to authorized users. Authenticated users can query File list or report views to obtain metadata of private files they...
CVE-2026-124443: frappe: Frappe Framework before 15.121.1 and 16.x before 16.35.0 contains a broken access control vulnerability in File listβ¦
Frappe Framework before 15.121.1 and 16.x before 16.35.0 contains a broken access control vulnerability in File list and report queries that fails to restrict private file records to authorized users. Authenticated users can query File list or report views to obtain metadata of private files they...
CVE-2025-34085-Multi-target
CVE-2025-34085 Multi-Target RCE Scanner Mass-exploitation scanner for CVE-2025-34085 β an unauthenticated remote code execution vulnerability in the WordPress Simple File List plugin. This tool uploads a PHP payload disguised as an image, renames it via a vulnerable file engine, and triggers shel...
By-Poloss..-..CVE-2026-11912
CVE-2026-11912: Simple File List eeListSettings'AllowFrontManage' != 'YES' return;...
CVE-2025-34085
CVE-2025-34085 β WordPress Simple File List Unauthenticated RCE Exploit An automated exploit and scanner for CVE-2025-34085 , a critical vulnerability in the WordPress Simple File List plugin, enabling unauthenticated remote code execution through arbitrary file upload and rename functionalities....
CVE-2025-34085
CVE-2025-34085 β WordPress Simple File List Unauthenticated RCE An automated exploit for CVE-2025-34085 duplicate of CVE-2020-36847, a critical unauthenticated remote code execution vulnerability in the WordPress Simple File List plugin versions β€ 4.2.2. Note: CVE-2025-34085 was rejected by MITRE...
CVE-2022-1119
CVE-2022-1119 1.Introduction WordPress Simple File List 3.2.8 FileRead POC 2.Usage poc -f host.txt // Batch scan poc -h 192.168.1.1 // Single scan 3.Disclaimer This tool is only for learning, research, and self-assessment. It should not be used for illegal purposes. Please comply with relevant la...
CVE-2025-34085
π Simple File List β Unauthenticated RCE Exploit CVE-2025-34085 β οΈ Exploit Code by: Mrj Haxcore A fully working Python exploit for the WordPress Simple File List plugin = 4.2.3, which is vulnerable to unauthenticated remote code execution RCE due to insecure file upload and rename logic. π£...
simple-file-list-rce
simple-file-list-rce Simple File List 4.2.3 - Unauthenticated Arbitrary File Upload RCE usage: simple.py -h -u URL -f1 FILE1 -f2 FILE2 -p PATH optional arguments: -h, --help show this help message and exit -u URL, --url URL Wordpress Url i.e https://wordpress.lan -f1 FILE1, --file1 FILE1 Harmless...
CVE-2025-34085
Cyberlone Indonesia π οΈ WordPress Simple File List RCE Scanner + Auto-Clean Automated tool to detect and exploit unauthenticated Remote Code Execution RCE on the WordPress Simple File List plugin, specifically those vulnerable to CVE-2025-34085. Equipped with an automatic target cleaning system and...
CVE-2026-92483
A flaw was found in the Linux kernel's liveupdate component. When a retrieval attempt for a File List Block FLB fails, the system does not record this failure. Consequently, if a user attempts to retrieve another file associated with the same FLB, the system may retry the failed retrieval. This...
PT-2026-110665
Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0 Description A heap out-of-bounds read exists in the WinPR clipboard function convert filedescriptors to file list. The issue occurs when the function scans a server-controlled FILEDESCRIPTORW cFileName usi...
CVE-2026-39792
Unauthenticated Arbitrary File Deletion in Simple File List = 6.3.11 versions...
CVE-2026-39792
The Simple File List WordPress plugin, version 6.3.11 and below , is vulnerable to an unauthenticated arbitrary file deletion vulnerability. The root cause involves a path traversal issue (CWE-22 ), allowing an attacker to delete files on the server. This flaw can result in high availability impa...
