CVE-2025-34085-Multi-target

CVE-2025-34085 Multi-Target RCE Scanner Mass-exploitation scanner for CVE-2025-34085 — an unauthenticated remote code execution vulnerability in the WordPress Simple File List plugin. This tool uploads a PHP payload disguised as an image, renames it via a vulnerable file engine, and triggers shel...

Simple File List < 6.1.13 - Reflected Cross-Site Scripting

Simple File List WordPress plugin \u003C 6.1.13 contains a reflected cross-site scripting caused by unsanitized URL output in an attribute, letting attackers execute malicious scripts in admin browsers, exploit requires victim to be an admin. id: CVE-2024-10146 info: name: Simple File List 6.1.13...

WordPress Simple File List - Path Traversal

Simple File List plugin allows path traversal via file upload, enabling files to be written outside the upload directory. id: CVE-2020-12832 info: name: WordPress Simple File List - Path Traversal author: riteshs4hu severity: critical description: | Simple File List plugin allows path traversal v...

Simple File List < 4.4.12 - Cross Site Scripting

The plugin does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting id: CVE-2022-3062 info: name: Simple File List 4.4.12 - Cross Site Scripting author: r3Y3r53 severity: medium description: | The plugin does not escape parameters before...

simple-file-list-rce

simple-file-list-rce Simple File List 4.2.3 - Subida de archivos arbitraria no autenticada RCE root@kitploit: usage: simple.py -h -u URL -f1 FILE1 -f2 FILE2 -p PATH optional arguments: -h, --help show this help message and exit -u URL, --url URL Wordpress Url i.e https://wordpress.lan -f1 FILE1,...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List RCE no autenticado Un exploit automatizado para CVE-2025-34085 duplicado de CVE-2020-36847, una vulnerabilidad crítica de ejecución remota de código sin autenticación en el plugin WordPress Simple File List versiones ≤ 4.2.2. Nota: CVE-2025-34085 fue...

CVE-2025-34085

📂 Simple File List – Exploit RCE no autenticado CVE-2025-34085 ⚠️ Código de exploit por: Mrj Haxcore Un exploit Python completamente funcional para el plugin Simple File List de WordPress = 4.2.3, el cual es vulnerable a ejecución remota de código no autenticada RCE debido a una lógica insegura de...

CVE-2025-34085

Cyberlone Indonesia 🛠️ Escáner de RCE de WordPress Simple File List + Limpieza Automática Herramienta automática para detectar y explotar Remote Code Execution RCE no autenticado en el plugin WordPress Simple File List , especialmente vulnerable a CVE-2025-34085. Equipado con un sistema de limpiez...

CVE-2022-1119

CVE-2022-1119 1.Introducción WordPress Simple File List 3.2.8 FileRead POC 2.Uso root@kitploit: poc -f host.txt // 批量扫描 poc -h 192.168.1.1 // 单个扫描 3.Aviso legal Esta herramienta es solo para aprendizaje, investigación y autoverificación. No debe usarse con fines ilegales; cumpla con las leyes y...

CVE-2025-34085

CVE-2025-34085 — Exploit de RCE No Autenticado en WordPress Simple File List Un exploit y escáner automatizado para CVE-2025-34085 , una vulnerabilidad crítica en el plugin WordPress Simple File List , que permite ejecución remota de código no autenticada a través de funcionalidades de carga y...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912: Simple File List = 6.3.7 - Falta de autorización para modificación de archivos no autenticada Resumen ejecutivo...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Stored XSS via File Description vulnerability

Unauthenticated Stored XSS via File Description vulnerability discovered by Ruwantha Harshamal in WordPress Plugin Simple File List versions = 6.3.11...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability

Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability discovered by Sanjar Tulkinov in WordPress Plugin Simple File List versions = 6.3.11...

CVE-2026-16617

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...

CVE-2026-16616

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

CVE-2026-16617

CVE-2026-16617 affects the Simple File List WordPress plugin through version 6.3.11 . The plugin fails to properly sanitise and escape a file's description before rendering it on the public file list. When front-end file management is enabled, unauthenticated attackers can inject malicious script...

CVE-2026-16616 Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

EUVD-2026-62272

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...

EUVD-2026-62271

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

CVE-2026-16616

CVE-2026-16616 affects the Simple File List WordPress plugin through version 6.3.11 . The root cause is a missing validation of the source path in a file-move operation that is reachable by unauthenticated users. This allows an attacker to read arbitrary files on the server (sensitive information...