Approved changes feed: RSS · Atom

cpe:2.3:a:mitchell_bennis:simple_file_list:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMitchell Bennis (273b6e5a-5b7d-5665-920d-22a00c393fab)
ProductSimple File List (ac91b638-725b-517f-a8db-6ef0531b645a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57382 vulnerable 2026-07-29 01:00:29.709068 WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a through <= 6.3.8.
Published: 2026-07-13T08:41:23.918Z
Updated: 2026-07-13T16:07:53.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24953 vulnerable 2026-06-08 07:53:18.752876 WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability
MEDIUM (6.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through <= 6.1.15.
Published: 2026-02-20T15:47:08.637Z
Updated: 2026-04-28T16:14:51.277Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-68591 vulnerable 2026-06-08 07:41:21.425962 WordPress Simple File List plugin <= 6.1.18 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple File List: from n/a through <= 6.1.18.
Published: 2025-12-24T13:10:43.716Z
Updated: 2026-04-28T16:14:31.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54021 vulnerable 2026-06-08 07:33:11.000554 WordPress Simple File List plugin <= 6.1.14 - Arbitrary File Download vulnerability
HIGH (7.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through <= 6.1.14.
Published: 2025-08-20T08:03:02.155Z
Updated: 2026-04-28T16:13:28.810Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47450 vulnerable 2026-06-08 07:27:14.401868 WordPress Simple File List plugin <= 6.1.13 - Settings Change Vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple File List: from n/a through <= 6.1.13.
Published: 2025-05-07T14:19:35.682Z
Updated: 2026-04-28T16:12:40.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44227 vulnerable 2026-06-08 06:12:39.624968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39924 vulnerable 2026-06-08 06:09:38.109556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.