Read the docs

eemitch

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

eemitch records in CISA KEV

No eemitch vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-10276 CVE-2026-11911 · GHSA-48xh-7hj4-29c9

Simple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter

Priority MEDIUM 41

The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the eeSFL_DeleteFile function in all versions up to, and including, 6.3.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-06-20 No fix listed CWE-22
TI-2026-10277 CVE-2026-11912 · GHSA-h7pv-3jqw-7hgc

Missing authorization in eemitch Simple File List

Priority LOW 39

The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization checks in all versions up to, and including, 6.3.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00516 Published 2026-06-20 No fix listed CWE-862
TI-2026-10437 CVE-2026-12119 · GHSA-45x9-67jx-vx44

Missing authorization in eemitch Simple File List

Priority LOW 31

The Simple File List plugin for WordPress is vulnerable to unauthorized file operations due to a missing authorization check on the 'frontmanage' shortcode attribute in all versions up to, and including, 6.3.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00467 Published 2026-06-20 No fix listed CWE-862
Open these records in search →