CVE-2025-34085-Multi-target

CVE-2025-34085 मल्टी-टार्गेट RCE स्कैनर CVE-2025-34085 के लिए सामूहिक-शोषण स्कैनर — वर्डप्रेस सिंपल फाइल लिस्ट प्लगइन में एक अप्रमाणित रिमोट कोड निष्पादन भेद्यता। यह उपकरण एक PHP पेलोड को एक चित्र के रूप में प्रच्छन्न करके अपलोड करता है, एक कमजोर फ़ाइल इंजन के माध्यम से इसका नाम बदलता है, और एक...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912: Simple File List = 6.3.7 - نقص التفويض يؤدي إلى تعديل الملفات غير المصادق عليه ملخص تنفيذي...

Simple File List < 6.1.13 - Reflected Cross-Site Scripting

Simple File List WordPress plugin \u003C 6.1.13 contains a reflected cross-site scripting caused by unsanitized URL output in an attribute, letting attackers execute malicious scripts in admin browsers, exploit requires victim to be an admin. id: CVE-2024-10146 info: name: Simple File List 6.1.13...

WordPress Simple File List - Path Traversal

Simple File List plugin allows path traversal via file upload, enabling files to be written outside the upload directory. id: CVE-2020-12832 info: name: WordPress Simple File List - Path Traversal author: riteshs4hu severity: critical description: | Simple File List plugin allows path traversal v...

Simple File List < 4.4.12 - Cross Site Scripting

The plugin does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting id: CVE-2022-3062 info: name: Simple File List 4.4.12 - Cross Site Scripting author: r3Y3r53 severity: medium description: | The plugin does not escape parameters before...

simple-file-list-rce

simple-file-list-rce Simple File List 4.2.3 - Неаутентифицированная произвольная загрузка файлов RCE root@kitploit: usage: simple.py -h -u URL -f1 FILE1 -f2 FILE2 -p PATH optional arguments: -h, --help show this help message and exit -u URL, --url URL Wordpress Url i.e https://wordpress.lan -f1...

CVE-2025-34085

📂 Simple File List – Exploit RCE sans authentification CVE-2025-34085 ⚠️ Code de l'exploit par : Mrj Haxcore Un exploit Python entièrement fonctionnel pour le plugin WordPress Simple File List = 4.2.3, vulnérable à une exécution de code à distance RCE sans authentification en raison d'une logique...

CVE-2025-34085

Cyberlone Indonesia 🛠️ WordPress Simple File List RCE Scanner + Auto-Clean Outil automatisé pour détecter et exploiter les exécutions de code à distance RCE non authentifiées sur le plugin WordPress Simple File List , en particulier celles vulnérables à CVE-2025-34085. Doté d'un système de...

CVE-2022-1119

CVE-2022-1119 1. Introduction WordPress Simple File List 3.2.8 FileRead POC 2. Utilisation root@kitploit: poc -f host.txt // Scan par lots poc -h 192.168.1.1 // Scan individuel 3. Clause de non-responsabilité Cet outil est uniquement destiné à l'apprentissage, à la recherche et à...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List अनप्रमाणित RCE CVE-2025-34085 CVE-2020-36847 का डुप्लिकेट के लिए एक स्वचालित एक्सप्लॉइट, जो WordPress Simple File List प्लगइन संस्करण ≤ 4.2.2 में एक गंभीर अनप्रमाणित रिमोट कोड निष्पादन भेद्यता है। नोट: CVE-2025-34085 को MITRE द्वारा CVE-2020-36847 के...

CVE-2025-34085

CVE-2025-34085 — استغلال تنفيذ أوامر عن بُعد غير مصادق عليه في إضافة Simple File List لووردبريس أداة استغلال وفحص آلية لثغرة CVE-2025-34085 ، وهي ثغرة حرجة في إضافة WordPress Simple File List ، تتيح تنفيذ أوامر عن بُعد دون مصادقة عبر رفع وإعادة تسمية الملفات بطريقة تعسفية. 📄 ملخص الثغرة معرف CVE:...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Stored XSS via File Description vulnerability

Unauthenticated Stored XSS via File Description vulnerability discovered by Ruwantha Harshamal in WordPress Plugin Simple File List versions = 6.3.11...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability

Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability discovered by Sanjar Tulkinov in WordPress Plugin Simple File List versions = 6.3.11...

CVE-2026-16616

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

CVE-2026-16617

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...

EUVD-2026-62272

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...

CVE-2026-16616 Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

CVE-2026-16617

CVE-2026-16617 affects the Simple File List WordPress plugin through version 6.3.11 . The plugin fails to properly sanitise and escape a file's description before rendering it on the public file list. When front-end file management is enabled, unauthenticated attackers can inject malicious script...

EUVD-2026-62271

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

CVE-2026-16616

CVE-2026-16616 affects the Simple File List WordPress plugin through version 6.3.11 . The root cause is a missing validation of the source path in a file-move operation that is reachable by unauthenticated users. This allows an attacker to read arbitrary files on the server (sensitive information...