Approved changes feed: RSS · Atom

cpe:2.3:a:mmm_simple_file_list:mmm_simple_file_list:2.3:*:*:*:*:*:*:*

part: a version: 2.3 update: *

VendorMmm Simple File List (f2a6057f-b629-52f8-857c-ae829fe576f2)
ProductMmm Simple File List (a0892278-9752-50ce-a19e-010af9f7da86)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4297 vulnerable 2026-06-08 06:16:12.028378 Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing
The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.
Published: 2023-11-27T16:22:01.657Z
Updated: 2025-06-05T14:01:19.686Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.