Pricing
Case studies
Login
Start trial
Simple File List
N/A
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
No VDP
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
19 patched
10 Mitigation rules
Reflected Cross Site Scripting (XSS) vulnerability
<= 6.3.8
07/07/2026
Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action vulnerability
<= 6.3.7
22/06/2026
Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter vulnerability
<= 6.3.7
22/06/2026
Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute vulnerability
<= 6.3.7
22/06/2026
Arbitrary File Download vulnerability
<= 6.1.15
09/02/2026
Broken Access Control vulnerability
<= 6.3.7
25/12/2025
Arbitrary File Download vulnerability
<= 6.1.14
28/07/2025
Settings Change Vulnerability
<= 6.1.13
07/05/2025
Reflected Cross-Site Scripting vulnerability
< 6.1.13
14/11/2024
Cross Site Scripting (XSS) vulnerability
<= 6.1.9
12/10/2023
Arbitrary File Deletion
<= 6.1.9
28/09/2023
Admin+ Stored XSS vulnerability
< 6.0.10
02/03/2023
Page Creation via Cross-Site Request Forgery (CSRF) vulnerability
<= 4.4.12
19/09/2022
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 4.4.11
19/09/2022
Arbitrary File Download vulnerability
<= 3.2.7
28/03/2022
Authenticated Arbitrary File Deletion vulnerability
<= 4.2.7
16/05/2020
Unauthenticated Arbitrary File Upload vulnerability leading to Remote Code Execution (RCE)
<= 4.2.2
27/04/2020
Unauthenticated Arbitrary File Download vulnerability
<= 3.2.4
27/05/2019
Authenticated Arbitrary File Delete vulnerability
<= 3.2.4
27/05/2019