220 matches found
Simple File List < 6.1.13 - Reflected Cross-Site Scripting
Simple File List WordPress plugin \u003C 6.1.13 contains a reflected cross-site scripting caused by unsanitized URL output in an attribute, letting attackers execute malicious scripts in admin browsers, exploit requires victim to be an admin. id: CVE-2024-10146 info: name: Simple File List 6.1.13...
Simple File List < 4.4.12 - Cross Site Scripting
The plugin does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting id: CVE-2022-3062 info: name: Simple File List 4.4.12 - Cross Site Scripting author: r3Y3r53 severity: medium description: | The plugin does not escape parameters before...
WordPress Simple File List - Path Traversal
Simple File List plugin allows path traversal via file upload, enabling files to be written outside the upload directory. id: CVE-2020-12832 info: name: WordPress Simple File List - Path Traversal author: riteshs4hu severity: critical description: | Simple File List plugin allows path traversal v...
CVE-2025-34085-Multi-target
CVE-2025-34085 Многоцелевой сканер RCE Сканер массовой эксплуатации для CVE-2025-34085 — неаутентифицированная уязвимость удалённого выполнения кода в плагине WordPress Simple File List. Этот инструмент загружает PHP-пейлоад, замаскированный под изображение, переименовывает его через уязвимый...
CVE-2026-39792
Unauthenticated Arbitrary File Deletion in Simple File List = 6.3.11 versions...
CVE-2026-39792 WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in Simple File List = 6.3.11 versions...
CVE-2026-39792
The Simple File List WordPress plugin, version 6.3.11 and below , is vulnerable to an unauthenticated arbitrary file deletion vulnerability. The root cause involves a path traversal issue (CWE-22 ), allowing an attacker to delete files on the server. This flaw can result in high availability impa...
EUVD-2026-93036
Unauthenticated Arbitrary File Deletion in Simple File List = 6.3.11 versions...
CVE-2025-34085
CVE-2025-34085 — Exploitation RCE non authentifiée de WordPress Simple File List Un exploit et scanner automatisé pour CVE-2025-34085 , une vulnérabilité critique dans le plugin WordPress Simple File List , permettant l'exécution de code à distance non authentifiée via des fonctionnalités de...
By-Poloss..-..CVE-2026-11912
CVE-2026-11912 : Simple File List = 6.3.7 - Absence d'autorisation menant à une modification de fichier non authentifiée Résumé exécutif Champ| Valeur ---|--- ID CVE| CVE-2026-11912 Score CVSS| 7.5 Élevé Vecteur CVSS| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Plugin concerné| Simple File List...
simple-file-list-rce
simple-file-list-rce Simple File List 4.2.3 - Неаутентифицированная произвольная загрузка файлов RCE usage: simple.py -h -u URL -f1 FILE1 -f2 FILE2 -p PATH optional arguments: -h, --help show this help message and exit -u URL, --url URL Wordpress Url i.e https://wordpress.lan -f1 FILE1, --file1...
CVE-2025-34085
📂 Simple File List – Неаутентифицированный RCE-эксплойт CVE-2025-34085 ⚠️ Код эксплойта: Mrj Haxcore Полностью рабочий Python-эксплойт для плагина WordPress Simple File List = 4.2.3, уязвимого к неаутентифицированному удалённому выполнению кода RCE из-за небезопасной логики загрузки и...
CVE-2022-1119
CVE-2022-1119 1. Введение WordPress Simple File List 3.2.8 FileRead POC 2. Использование poc -f host.txt // 批量扫描 poc -h 192.168.1.1 // 单个扫描 3. Отказ от ответственности Этот инструмент предназначен только для обучения, исследований и самостоятельной проверки. Не используйте его в незаконных...
CVE-2025-34085
Cyberlone Indonesia 🛠️ Сканер RCE для WordPress Simple File List + Автоочистка Автоматический инструмент для обнаружения и эксплуатации удаленного выполнения кода RCE без аутентификации в плагине WordPress Simple File List , особенно уязвимых к CVE-2025-34085. Оснащен системой автоматической...
CVE-2025-34085
CVE-2025-34085 — WordPress Simple File List RCE non authentifié Un exploit automatisé pour CVE-2025-34085 doublon de CVE-2020-36847, une vulnérabilité critique d'exécution de code à distance non authentifiée dans le plugin WordPress Simple File List versions ≤ 4.2.2. Note : CVE-2025-34085 a été...
WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Stored XSS via File Description vulnerability
Unauthenticated Stored XSS via File Description vulnerability discovered by Ruwantha Harshamal in WordPress Plugin Simple File List versions = 6.3.11...
WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability
Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability discovered by Sanjar Tulkinov in WordPress Plugin Simple File List versions = 6.3.11...
CVE-2026-16617
The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...
CVE-2026-16616
The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...