Mitchell Bennis

Products

ProductCVEsExploitedLatest
Simple File List8–Oct 6, 2026

Exploited and recent CVEs

  • CVE-2026-39792 High 8.6 WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability 0.3%
  • CVE-2026-57382 High 7.1 WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-24953 Medium 6.5 WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability 0.4%
  • CVE-2025-68591 Medium 5.4 WordPress Simple File List plugin <= 6.1.18 - Broken Access Control vulnerability 0.2%
  • CVE-2025-54021 High 7.5 WordPress Simple File List plugin <= 6.1.14 - Arbitrary File Download vulnerability 0.4%
  • CVE-2025-47450 Medium 5.3 WordPress Simple File List plugin <= 6.1.13 - Settings Change Vulnerability 0.3%
  • CVE-2023-44227 High 7.5 WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Arbitrary File Deletion 0.7%
  • CVE-2023-39924 Medium 5.9 WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Cross Site Scripting (XSS) 0.5%