Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Mitchell Bennis Clear all filters
TI-2026-41319 CVE-2026-57382 · GHSA-qwfg-xv7j-44xq

WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a t…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79
TI-2026-20138 CVE-2026-24953 · GHSA-chqg-r72f-gcgr

WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability

Priority LOW 29

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0043 Published 2026-02-20 No fix listed CWE-22
TI-2025-42112 CVE-2025-68591 · GHSA-v4vp-c74m-hxxm

WordPress Simple File List plugin <= 6.1.18 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple File List: from n/a through <= 6.…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00248 Published 2025-12-24 No fix listed CWE-862
TI-2025-33866 CVE-2025-54021 · GHSA-4mp5-q674-48f6

WordPress Simple File List plugin <= 6.1.14 - Arbitrary File Download vulnerability

Priority LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a throug…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00415 Published 2025-08-20 No fix listed CWE-22
TI-2025-29947 CVE-2025-47450 · GHSA-24q5-v927-9w6j

WordPress Simple File List plugin <= 6.1.13 - Settings Change Vulnerability

Priority LOW 30

Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple File List: from n/a through <= 6.…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00339 Published 2025-05-07 No fix listed CWE-862