WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-file-list
Published
2022-09-19
Title
Simple File List < 4.4.13 - Page Creation via CSRF
Slug
simple-file-list
Published
2022-09-19
Title
Simple File List < 4.4.12 - Admin+ Stored Cross-Site Scripting
Slug
simple-file-list
Published
2023-02-28
Title
Simple File List < 6.0.10 - Admin+ Stored XSS
Slug
simple-file-list
Published
2023-10-12
Title
Simple File List < 6.1.10 - Admin+ Stored XSS
Slug
simple-file-list
Published
2023-09-28
Title
Simple File List < 6.1.10 - Unauthenticated Arbitrary File Deletion
Slug
simple-file-list
Published
2024-10-24
Title
Simple File List < 6.1.13 - Reflected Cross-Site Scripting
Slug
simple-file-list
Published
2025-05-07
Title
Simple File List < 6.1.14 - Missing Authorization to Unauthenticated Minor Settings Update
Slug
simple-file-list
Published
2025-07-28
Title
Simple File List < 6.1.15 - Unauthenticated Arbitrary File Download
Slug
simple-file-list
Published
2025-12-25
Title
Simple File List < 6.3.8 - Missing Authorization
Slug
simple-file-list
Published
2026-02-09
Title
Simple File List < 6.1.16 - Authenticated (Subscriber+) Arbitrary File Download
Slug
simple-file-list
Published
2026-06-19
Title
Simple File List < 6.3.8 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action
Slug
simple-file-list
Published
2026-06-19
Title
Simple File List < 6.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute
Slug
simple-file-list
Published
2026-06-19
Title
Simple File List < 6.3.8 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter
Slug
simple-file-list
Published
2026-07-07
Title
Simple File List < 6.3.9 - Reflected Cross-Site Scripting
Slug
simple-finance-calculator
Published
2025-10-08
Title
Simple Finance Calculator <= 1.0 - Reflected Cross-Site Scripting
Slug
simple-flash-video
Published
2014-08-01
Title
Simple Flash Video 1.7 - Cross Site Scripting
Slug
simple-flickr-display
Published
2014-08-01
Title
Simple Flickr Display - Username Field Stored Cross-Site Scripting (XSS)
Slug
simple-folio
Published
2025-11-26
Title
Simple Folio < 1.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
simple-folio
Published
2025-12-15
Title
Simple Folio < 1.1.1 - Cross-Site Request Forgery
Slug
simple-folio
Published
2026-01-27
Title
Simple Folio < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Client name' and 'Link' Meta Fields
Slug
simple-football-score-board
Published
2026-03-20
Title
Simple Football Scoreboard <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
simple-form
Published
2024-07-09
Title
FormFlow < 2.12.2 - Admin+ Stored XSS
Slug
simple-forum
Published
2014-08-01
Title
Simple Forum - File Upload
Slug
simple-forum
Published
2014-08-01
Title
Simple Forum sf-profile.php u Parameter SQL Injection
Slug
simple-gallery-odihost
Published
2024-10-31
Title
Easy Gallery <= 1.4 - Authenticated (Contributor+) SQL Injection