447 matches found
CVE-2025-34085-Multi-target
CVE-2025-34085 Multi-Target RCE Scanner Mass-exploitation scanner for CVE-2025-34085 — an unauthenticated remote code execution vulnerability in the WordPress Simple File List plugin. This tool uploads a PHP payload disguised as an image, renames it via a vulnerable file engine, and triggers shel...
Simple File List < 4.4.12 - Cross Site Scripting
The plugin does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting id: CVE-2022-3062 info: name: Simple File List 4.4.12 - Cross Site Scripting author: r3Y3r53 severity: medium description: | The plugin does not escape parameters before...
WordPress Simple File List - Path Traversal
Simple File List plugin allows path traversal via file upload, enabling files to be written outside the upload directory. id: CVE-2020-12832 info: name: WordPress Simple File List - Path Traversal author: riteshs4hu severity: critical description: | Simple File List plugin allows path traversal v...
Simple File List < 6.1.13 - Reflected Cross-Site Scripting
Simple File List WordPress plugin \u003C 6.1.13 contains a reflected cross-site scripting caused by unsanitized URL output in an attribute, letting attackers execute malicious scripts in admin browsers, exploit requires victim to be an admin. id: CVE-2024-10146 info: name: Simple File List 6.1.13...
CVE-2025-34085
CVE-2025-34085 — WordPress Simple File List Unauthenticated RCE An automated exploit for CVE-2025-34085 duplicate of CVE-2020-36847, a critical unauthenticated remote code execution vulnerability in the WordPress Simple File List plugin versions ≤ 4.2.2. Note: CVE-2025-34085 was rejected by MITRE...
By-Poloss..-..CVE-2026-11912
CVE-2026-11912: Simple File List eeListSettings'AllowFrontManage' != 'YES' return;...
CVE-2022-1119
CVE-2022-1119 1.Introduction WordPress Simple File List 3.2.8 FileRead POC 2.Usage poc -f host.txt // Batch scan poc -h 192.168.1.1 // Single scan 3.Disclaimer This tool is only for learning, research, and self-assessment. It should not be used for illegal purposes. Please comply with relevant la...
simple-file-list-rce
simple-file-list-rce Simple File List 4.2.3 - Unauthenticated Arbitrary File Upload RCE usage: simple.py -h -u URL -f1 FILE1 -f2 FILE2 -p PATH optional arguments: -h, --help show this help message and exit -u URL, --url URL Wordpress Url i.e https://wordpress.lan -f1 FILE1, --file1 FILE1 Harmless...
CVE-2025-34085
CVE-2025-34085 — WordPress Simple File List Unauthenticated RCE Exploit An automated exploit and scanner for CVE-2025-34085 , a critical vulnerability in the WordPress Simple File List plugin, enabling unauthenticated remote code execution through arbitrary file upload and rename functionalities....
CVE-2025-34085
📂 Simple File List – Unauthenticated RCE Exploit CVE-2025-34085 ⚠️ Exploit Code by: Mrj Haxcore A fully working Python exploit for the WordPress Simple File List plugin = 4.2.3, which is vulnerable to unauthenticated remote code execution RCE due to insecure file upload and rename logic. 💣...
CVE-2025-34085
Cyberlone Indonesia 🛠️ WordPress Simple File List RCE Scanner + Auto-Clean Automated tool to detect and exploit unauthenticated Remote Code Execution RCE on the WordPress Simple File List plugin, specifically those vulnerable to CVE-2025-34085. Equipped with an automatic target cleaning system and...
CVE-2026-92483
A flaw was found in the Linux kernel's liveupdate component. When a retrieval attempt for a File List Block FLB fails, the system does not record this failure. Consequently, if a user attempts to retrieve another file associated with the same FLB, the system may retry the failed retrieval. This...
PT-2026-110665
Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0 Description A heap out-of-bounds read exists in the WinPR clipboard function convert filedescriptors to file list. The issue occurs when the function scans a server-controlled FILEDESCRIPTORW cFileName usi...
CVE-2026-39792
Unauthenticated Arbitrary File Deletion in Simple File List = 6.3.11 versions...
CVE-2026-39792 WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in Simple File List = 6.3.11 versions...
EUVD-2026-93036
Unauthenticated Arbitrary File Deletion in Simple File List = 6.3.11 versions...
CVE-2026-39792
The Simple File List WordPress plugin, version 6.3.11 and below , is vulnerable to an unauthenticated arbitrary file deletion vulnerability. The root cause involves a path traversal issue (CWE-22 ), allowing an attacker to delete files on the server. This flaw can result in high availability impa...
CVE-2026-39792 WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in Simple File List = 6.3.11 versions...
