Advisories · Technology

Mitchell Bennis Simple File List.

Every CVE that names Mitchell Bennis Simple File List among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-39792 CVE record

CVSS 8.6 High

WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability
- Mitchell Bennis Simple File List
- Path traversal
Not analysed yet 6 Oct 2026
CVE-2026-57382 CVE record

CVSS 7.1 High

WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability
- Mitchell Bennis Simple File List
- Cross-site scripting (XSS)
Not analysed yet 13 Jul 2026
CVE-2026-24953 CVE record

CVSS 6.5 Medium

WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability
- Mitchell Bennis Simple File List
- Path traversal
Not analysed yet 20 Feb 2026
CVE-2025-68591 CVE record

CVSS 5.4 Medium

WordPress Simple File List plugin <= 6.1.18 - Broken Access Control vulnerability
- Mitchell Bennis Simple File List
- Broken access control
Not analysed yet 24 Dec 2025
CVE-2025-54021 CVE record

CVSS 7.5 High

WordPress Simple File List plugin <= 6.1.14 - Arbitrary File Download vulnerability
- Mitchell Bennis Simple File List
- Path traversal
Not analysed yet 20 Aug 2025
CVE-2025-47450 CVE record

CVSS 5.3 Medium

WordPress Simple File List plugin <= 6.1.13 - Settings Change Vulnerability
- Mitchell Bennis Simple File List
- Broken access control
Not analysed yet 7 May 2025
CVE-2023-44227 CVE record

CVSS 7.5 High

WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Arbitrary File Deletion
- Mitchell Bennis Simple File List
- Broken access control
Not analysed yet 17 Apr 2024
CVE-2023-39924 CVE record

CVSS 5.9 Medium

WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Cross Site Scripting (XSS)
- Mitchell Bennis Simple File List
- Cross-site scripting (XSS)
Not analysed yet 24 Oct 2023