CVE-2025-34085-Multi-target

CVE-2025-34085 मल्टी-टार्गेट RCE स्कैनर CVE-2025-34085 के लिए सामूहिक-शोषण स्कैनर — वर्डप्रेस सिंपल फाइल लिस्ट प्लगइन में एक अप्रमाणित रिमोट कोड निष्पादन भेद्यता। यह उपकरण एक PHP पेलोड को एक चित्र के रूप में प्रच्छन्न करके अपलोड करता है, एक कमजोर फ़ाइल इंजन के माध्यम से इसका नाम बदलता है, और एक...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912: Simple File List = 6.3.7 - अनधिकृत पहुँच की कमी से अप्रमाणित फ़ाइल संशोधन कार्यकारी सारांश...

Simple File List < 6.1.13 - Reflected Cross-Site Scripting

Simple File List WordPress plugin \u003C 6.1.13 contains a reflected cross-site scripting caused by unsanitized URL output in an attribute, letting attackers execute malicious scripts in admin browsers, exploit requires victim to be an admin. id: CVE-2024-10146 info: name: Simple File List 6.1.13...

WordPress Simple File List - Path Traversal

Simple File List plugin allows path traversal via file upload, enabling files to be written outside the upload directory. id: CVE-2020-12832 info: name: WordPress Simple File List - Path Traversal author: riteshs4hu severity: critical description: | Simple File List plugin allows path traversal v...

simple-file-list-rce

simple-file-list-rce Simple File List 4.2.3 - ثغرة رفع ملفات عشوائية بدون مصادقة تؤدي إلى تنفيذ أوامر برمجية عن بُعد RCE root@kitploit: usage: simple.py -h -u URL -f1 FILE1 -f2 FILE2 -p PATH optional arguments: -h, --help show this help message and exit -u URL, --url URL Wordpress Url i.e...

Simple File List < 4.4.12 - Cross Site Scripting

The plugin does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting id: CVE-2022-3062 info: name: Simple File List 4.4.12 - Cross Site Scripting author: r3Y3r53 severity: medium description: | The plugin does not escape parameters before...

CVE-2025-34085

📂 Simple File List – अप्रमाणित RCE शोषण CVE-2025-34085 ⚠️ शोषण कोड द्वारा: Mrj Haxcore WordPress Simple File List प्लगइन = 4.2.3 के लिए एक पूरी तरह काम करने वाला Python शोषण, जो असुरक्षित फ़ाइल अपलोड और नाम बदलने के तर्क के कारण अप्रमाणित दूरस्थ कोड निष्पादन RCE के लिए कमजोर है। 💣 कमजोरियों का...

CVE-2025-34085

Cyberlone इंडोनेशिया 🛠️ WordPress Simple File List RCE Scanner + Auto-Clean स्वचालित उपकरण जो WordPress Simple File List प्लगइन में अनप्रमाणित Remote Code Execution RCE का पता लगाने और उसका शोषण करने के लिए है, विशेष रूप से CVE-2025-34085 के प्रति संवेदनशील। बड़े पैमाने पर कुशलता के लिए स्वचालित...

CVE-2022-1119

CVE-2022-1119 1. परिचय WordPress Simple File List 3.2.8 FileRead POC 2. उपयोग root@kitploit: poc -f host.txt // बैच स्कैन poc -h 192.168.1.1 // एकल स्कैन 3. अस्वीकरण यह उपकरण केवल सीखने, शोध और स्व-जांच के लिए है। इसका उपयोग अवैध उद्देश्यों के लिए नहीं किया जाना चाहिए, कृपया प्रासंगिक कानूनों और...

CVE-2025-34085

CVE-2025-34085 — ثغرة تنفيذ التعليمات البرمجية عن بُعد غير مصادق عليها في WordPress Simple File List أداة استغلال آلية لـ CVE-2025-34085 مكررة لـ CVE-2020-36847، وهي ثغرة حرجة لتنفيذ التعليمات البرمجية عن بُعد غير مصادق عليها في إضافة WordPress Simple File List الإصدارات ≤ 4.2.2. ملاحظة: تم رفض...

CVE-2025-34085

CVE-2025-34085 — استغلال تنفيذ أوامر عن بُعد غير مصادق عليه في إضافة Simple File List لووردبريس أداة استغلال وفحص آلية لثغرة CVE-2025-34085 ، وهي ثغرة حرجة في إضافة WordPress Simple File List ، تتيح تنفيذ أوامر عن بُعد دون مصادقة عبر رفع وإعادة تسمية الملفات بطريقة تعسفية. 📄 ملخص الثغرة معرف CVE:...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Stored XSS via File Description vulnerability

Unauthenticated Stored XSS via File Description vulnerability discovered by Ruwantha Harshamal in WordPress Plugin Simple File List versions = 6.3.11...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability

Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability discovered by Sanjar Tulkinov in WordPress Plugin Simple File List versions = 6.3.11...

CVE-2026-16617

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...

CVE-2026-16616

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

EUVD-2026-62272

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...

CVE-2026-16616 Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

CVE-2026-16617

CVE-2026-16617 affects the Simple File List WordPress plugin through version 6.3.11 . The plugin fails to properly sanitise and escape a file's description before rendering it on the public file list. When front-end file management is enabled, unauthenticated attackers can inject malicious script...

CVE-2026-16616

CVE-2026-16616 affects the Simple File List WordPress plugin through version 6.3.11 . The root cause is a missing validation of the source path in a file-move operation that is reachable by unauthenticated users. This allows an attacker to read arbitrary files on the server (sensitive information...

EUVD-2026-62271

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...