Simplefilelist Simple-file-list
5 CVEs affecting Simplefilelist Simple-file-list. Latest disclosed: 2022-10-10. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-12832 | Critical | 9.8 | 2020-05-13 | WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly… |
CVE-2022-1119 | High | 7.5 | 2022-04-19 | The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php file due to m… |
CVE-2022-3208 | Medium | 6.5 | 2022-10-10 | The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and… |
CVE-2022-3062 | Medium | 6.1 | 2022-09-26 | The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scrip… |
CVE-2022-3207 | Medium | 4.8 | 2022-10-10 | The Simple File List WordPress plugin before 4.4.12 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |