Mitchell Bennis vulnerabilities

TI-2026-67985 CVE-2026-39792 · GHSA-x95h-m9rf-x2fr

Arbitrary file deletion in WordPress Simple File List plugin

MEDIUM 43

Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00335 Published 2026-10-06 No fix listed CWE-22

TI-2023-23753 CVE-2023-44227 · GHSA-69r5-mj5p-r3g4

WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Arbitrary File Deletion

MEDIUM 40

Missing Authorization vulnerability in Mitchell Bennis Simple File List.This issue affects Simple File List: from n/a through 6.1.9.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00699 Published 2024-04-17 No fix listed CWE-862

TI-2025-33866 CVE-2025-54021 · GHSA-4mp5-q674-48f6

WordPress Simple File List plugin <= 6.1.14 - Arbitrary File Download vulnerability

LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a throug…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00415 Published 2025-08-20 No fix listed CWE-22

TI-2026-41319 CVE-2026-57382 · GHSA-qwfg-xv7j-44xq

WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a t…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79

TI-2025-29947 CVE-2025-47450 · GHSA-24q5-v927-9w6j

WordPress Simple File List plugin <= 6.1.13 - Settings Change Vulnerability

LOW 30

Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple File List: from n/a through <= 6.…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00339 Published 2025-05-07 No fix listed CWE-862

TI-2026-20138 CVE-2026-24953 · GHSA-chqg-r72f-gcgr

WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability

LOW 29

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0043 Published 2026-02-20 No fix listed CWE-22

TI-2025-42112 CVE-2025-68591 · GHSA-v4vp-c74m-hxxm

WordPress Simple File List plugin <= 6.1.18 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple File List: from n/a through <= 6.…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00248 Published 2025-12-24 No fix listed CWE-862

Critical	0
High	4
Medium	3
Low	0
No CVSS	0

Mitchell Bennis

Exploited now

Records