| CVE-2026-16616 |
The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation…
|
8.6
High
|
Aug 19, 2026 |
| CVE-2026-16617 |
The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before…
|
8.8
High
|
Aug 19, 2026 |
| CVE-2024-10146 |
The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it…
|
5.4
Medium
|
Nov 14, 2024 |
| CVE-2023-1025 |
The Simple File List WordPress plugin before 6.0.10 does not sanitise and escape some of its settings, which could allow…
|
4.8
Medium
|
Mar 27, 2023 |
| CVE-2022-3208 |
The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make…
|
Not rated
|
Oct 10, 2022 |
| CVE-2022-3207 |
The Simple File List WordPress plugin before 4.4.12 does not sanitise and escape some of its settings, which could allow…
|
Not rated
|
Oct 10, 2022 |
| CVE-2022-3062 |
The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in…
|
6.1
Medium
|
Sep 26, 2022 |