WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-file-downloader
Published
2023-01-25
Title
Simple File Downloader <= 1.0.4 - Contributor+ Stored XSS via Shortcode
Slug
simple-file-list
Published
2019-05-23
Title
Simple File List Plugin < 3.2.8 - Unauthenticated Arbitrary File Download
Slug
simple-file-list
Published
2019-05-23
Title
Simple File List Plugin <= 3.2.4 - Authenticated Arbitrary File Delete
Slug
simple-file-list
Published
2020-04-27
Title
Simple File List < 4.2.3 - Unauthenticated Arbitrary File Upload RCE
Slug
simple-file-list
Published
2020-05-16
Title
Simple File List < 4.2.8 - Authenticated Arbitrary File Deletion
Slug
simple-file-list
Published
2019-06-02
Title
Simple File List < 3.2.8 - Unauthenticated Arbitrary File Download
Slug
simple-file-list
Published
2022-08-30
Title
Simple File List < 4.4.12 - Reflected Cross-Site Scripting
Slug
simple-file-list
Published
2022-09-19
Title
Simple File List < 4.4.13 - Page Creation via CSRF
Slug
simple-file-list
Published
2022-09-19
Title
Simple File List < 4.4.12 - Admin+ Stored Cross-Site Scripting
Slug
simple-file-list
Published
2023-02-28
Title
Simple File List < 6.0.10 - Admin+ Stored XSS
Slug
simple-file-list
Published
2023-10-12
Title
Simple File List < 6.1.10 - Admin+ Stored XSS
Slug
simple-file-list
Published
2023-09-28
Title
Simple File List < 6.1.10 - Unauthenticated Arbitrary File Deletion
Slug
simple-file-list
Published
2024-10-24
Title
Simple File List < 6.1.13 - Reflected Cross-Site Scripting
Slug
simple-file-list
Published
2025-05-07
Title
Simple File List < 6.1.14 - Missing Authorization to Unauthenticated Minor Settings Update
Slug
simple-file-list
Published
2025-07-28
Title
Simple File List < 6.1.15 - Unauthenticated Arbitrary File Download
Slug
simple-file-list
Published
2025-12-25
Title
Simple File List < 6.3.8 - Missing Authorization
Slug
simple-file-list
Published
2026-02-09
Title
Simple File List < 6.1.16 - Authenticated (Subscriber+) Arbitrary File Download
Slug
simple-file-list
Published
2026-06-19
Title
Simple File List < 6.3.8 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action
Slug
simple-file-list
Published
2026-06-19
Title
Simple File List < 6.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute
Slug
simple-file-list
Published
2026-06-19
Title
Simple File List < 6.3.8 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter
Slug
simple-file-list
Published
2026-07-07
Title
Simple File List < 6.3.9 - Reflected Cross-Site Scripting
Slug
simple-file-list
Published
2026-08-17
Title
Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal
Slug
simple-file-list
Published
2026-08-17
Title
Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File Description
Slug
simple-finance-calculator
Published
2025-10-08
Title
Simple Finance Calculator <= 1.0 - Reflected Cross-Site Scripting
Slug
simple-flash-video
Published
2014-08-01
Title
Simple Flash Video 1.7 - Cross Site Scripting