Eemitch Simple File List
5 CVEs affecting Eemitch Simple File List. Latest disclosed: 2026-06-20. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-36847 | Critical | 9.8 | 2025-07-12 | The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename function which can be u… |
CVE-2026-11912 | High | 7.5 | 2026-06-20 | The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization checks in all versions up to, and incl… |
CVE-2026-11911 | High | 7.5 | 2026-06-20 | The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the eeSFL_DeleteFile function in… |
CVE-2022-1119 | High | 7.5 | 2022-04-19 | The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php file due to m… |
CVE-2026-12119 | Medium | 6.5 | 2026-06-20 | The Simple File List plugin for WordPress is vulnerable to unauthorized file operations due to a missing authorization check on the 'frontmanage' shortcode att… |