Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: eemitch Clear all filters
TI-2026-10437 CVE-2026-12119 · GHSA-45x9-67jx-vx44

Missing authorization in eemitch Simple File List

Priority LOW 31

The Simple File List plugin for WordPress is vulnerable to unauthorized file operations due to a missing authorization check on the 'frontmanage' shortcode attribute in all versions up to, and including, 6.3.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00467 Published 2026-06-20 No fix listed CWE-862
TI-2026-10276 CVE-2026-11911 · GHSA-48xh-7hj4-29c9

Simple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter

Priority MEDIUM 41

The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the eeSFL_DeleteFile function in all versions up to, and including, 6.3.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-06-20 No fix listed CWE-22
TI-2026-10277 CVE-2026-11912 · GHSA-h7pv-3jqw-7hgc

Missing authorization in eemitch Simple File List

Priority LOW 39

The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization checks in all versions up to, and including, 6.3.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00516 Published 2026-06-20 No fix listed CWE-862