Skip to content
OpenAdvisories

Vendor

Mitchell Bennis

8 known vulnerabilities.

Products

Simple File List 8
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.6
    CVE-2026-39792

    WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability

    Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.

    Mitchell Bennis Simple File List
  • High 7.1
    CVE-2026-57382

    WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a through <= 6.3.8.

    Mitchell Bennis Simple File List
  • High 7.5
    CVE-2025-54021

    WordPress Simple File List plugin <= 6.1.14 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through <= 6.1.14.

    Mitchell Bennis Simple File List
  • High 7.5
    CVE-2023-44227

    WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Arbitrary File Deletion

    Missing Authorization vulnerability in Mitchell Bennis Simple File List.This issue affects Simple File List: from n/a through 6.1.9.

    Mitchell Bennis Simple File List