eemitch

Products

ProductCVEsExploitedLatest
Simple File List5–Jun 20, 2026

Exploited and recent CVEs

  • CVE-2026-12119 Medium 6.5 Simple File List <= 6.3.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute 0.5%
  • CVE-2026-11911 High 7.5 Simple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter 1.2%
  • CVE-2026-11912 High 7.5 Simple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action 0.5%
  • CVE-2020-36847 Critical 9.8 Simple File List < 4.2.3 - Remote Code Execution 43.5%
  • CVE-2022-1119 High 7.5 Simple File List <= 3.2.7 - Arbitrary File Download 20.0%