Simple File List < 6.1.13 - Reflected Cross-Site Scripting

Simple File List WordPress plugin \u003C 6.1.13 contains a reflected cross-site scripting caused by unsanitized URL output in an attribute, letting attackers execute malicious scripts in admin browsers, exploit requires victim to be an admin. id: CVE-2024-10146 info: name: Simple File List 6.1.13...

WordPress Simple File List - Path Traversal

Simple File List plugin allows path traversal via file upload, enabling files to be written outside the upload directory. id: CVE-2020-12832 info: name: WordPress Simple File List - Path Traversal author: riteshs4hu severity: critical description: | Simple File List plugin allows path traversal v...

CVE-2025-34085-Multi-target

CVE-2025-34085 マルチターゲットRCEスキャナー CVE-2025-34085 の大量悪用スキャナー — WordPress Simple File List プラグインにおける未認証のリモートコード実行脆弱性。 このツールは、PHPペイロードを画像に偽装してアップロードし、脆弱なファイルエンジンを介してリネームし、カスタムコマンドでシェル実行をトリガーします。大規模なターゲットセットに対してマルチスレッドスキャンをサポートします。 🔥 機能 マルチターゲットスキャン targets.txt から 悪意のあるペイロードの自動アップロードとリネーム...

simple-file-list-rce

simple-file-list-rce Simple File List 4.2.3 - 未認証の任意ファイルアップロード RCE root@kitploit: usage: simple.py -h -u URL -f1 FILE1 -f2 FILE2 -p PATH optional arguments: -h, --help show this help message and exit -u URL, --url URL Wordpress Url i.e https://wordpress.lan -f1 FILE1, --file1 FILE1 Harmless File...

Simple File List < 4.4.12 - Cross Site Scripting

The plugin does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting id: CVE-2022-3062 info: name: Simple File List 4.4.12 - Cross Site Scripting author: r3Y3r53 severity: medium description: | The plugin does not escape parameters before...

CVE-2025-34085

📂 Simple File List – 未認証RCEエクスプロイト CVE-2025-34085 ⚠️ エクスプロイトコード作成者: Mrj Haxcore WordPressプラグイン Simple File List バージョン4.2.3以下 用の完全に動作するPythonエクスプロイトです。このプラグインは、安全でないファイルアップロードおよびリネームロジックにより、未認証リモートコード実行 RCE の脆弱性があります。 💣 脆弱性概要 プラグイン : Simple File List simple-file-list バージョン : = 4.2.3 CVE :...

CVE-2022-1119

CVE-2022-1119 1.はじめに WordPress Simple File List 3.2.8 FileRead POC 2.使い方 root@kitploit: poc -f host.txt // バッチスキャン poc -h 192.168.1.1 // 単体スキャン 3.免責事項 このツールは学習・研究・自己点検のみを目的としています。 不正な目的で使用しないでください。関連する法令を遵守してください。 本ツールの使用によって生じたいかなるリスクも当方の責任ではありません。...

CVE-2025-34085

Cyberlone Indonesia 🛠️ WordPress Simple File List RCEスキャナー + 自動クリーンアップ WordPress Simple File List プラグインにおける認証なしのRemote Code Execution（RCE） 、特にCVE-2025-34085 に脆弱なものを検出・悪用する自動ツールです。 大規模でも効率的に動作するよう、ターゲットの自動クリーンアップシステムとマルチスレッド対応を備えています。 📌 脆弱性情報 CVE ID : CVE-2025-34085 コンポーネント : WordPressプラグイン – Simpl...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List 인증되지 않은 RCE CVE-2025-34085CVE-2020-36847 의 중복에 대한 자동 익스플로잇입니다. 이는 WordPress Simple File List 플러그인 버전 ≤ 4.2.2 에서 발생하는 심각한 인증되지 않은 원격 코드 실행 취약점입니다. 참고: CVE-2025-34085는 MITRE에 의해 CVE-2020-36847의 중복으로 거부되었습니다. 취약점은 실제이며 버전 4.2.3에서 패치되었습니다. 두 CVE ID는 동일한 근본...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List 인증되지 않은 RCE 익스플로잇 CVE-2025-34085 에 대한 자동화된 익스플로잇 및 스캐너로, WordPress Simple File List 플러그인의 심각한 취약점으로, 임의 파일 업로드 및 이름 변경 기능을 통해 인증되지 않은 원격 코드 실행 을 가능하게 합니다. 📄 CVE 요약 CVE ID: CVE-2025-34085 영향받는 구성 요소: WordPress 플러그인 — Simple File List 취약점 유형: 인증되지 않은 파일 업...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912: Simple File List = 6.3.7 - 인증 누출로 인한 인증되지 않은 파일 수정 요약...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Stored XSS via File Description vulnerability

Unauthenticated Stored XSS via File Description vulnerability discovered by Ruwantha Harshamal in WordPress Plugin Simple File List versions = 6.3.11...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability

Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability discovered by Sanjar Tulkinov in WordPress Plugin Simple File List versions = 6.3.11...

CVE-2026-16616

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

CVE-2026-16617

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...

CVE-2026-16616 Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

EUVD-2026-62272

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...

CVE-2026-16617

The Simple File List WordPress plugin (versions

CVE-2026-16616 Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

EUVD-2026-62271

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...