Simple File List
Mitchell Bennis
Developer
6.3.11
Latest version
3,000
Installations
No date
Last updated
Vulnerability history
0 present
19 patched
10 Mitigation rules
- Reflected Cross Site Scripting (XSS) vulnerability<= 6.3.86 days ago
- Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action vulnerability<= 6.3.722/06/2026
- Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter vulnerability<= 6.3.722/06/2026
- Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute vulnerability<= 6.3.722/06/2026
- Arbitrary File Download vulnerability<= 6.1.1509/02/2026
- Broken Access Control vulnerability<= 6.3.725/12/2025
- Arbitrary File Download vulnerability<= 6.1.1428/07/2025
- Settings Change Vulnerability<= 6.1.1307/05/2025
- Reflected Cross-Site Scripting vulnerability< 6.1.1314/11/2024
- Cross Site Scripting (XSS) vulnerability<= 6.1.912/10/2023
- Arbitrary File Deletion<= 6.1.928/09/2023
- Admin+ Stored XSS vulnerability< 6.0.1002/03/2023
- Page Creation via Cross-Site Request Forgery (CSRF) vulnerability<= 4.4.1219/09/2022
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 4.4.1119/09/2022
- Arbitrary File Download vulnerability<= 3.2.728/03/2022
- Authenticated Arbitrary File Deletion vulnerability<= 4.2.716/05/2020
- Unauthenticated Arbitrary File Upload vulnerability leading to Remote Code Execution (RCE)<= 4.2.227/04/2020
- Unauthenticated Arbitrary File Download vulnerability<= 3.2.427/05/2019
- Authenticated Arbitrary File Delete vulnerability<= 3.2.427/05/2019