CVE Database /
CVE-2020-12832
CVE · Critical
CVE-2020-12832 — Simple File List [simple-file-list] < 4.2.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2020-12832
|
Simple File List [simple-file-list] < 4.2.8 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
Critical
9.8
|
< 4.2.8
|
4.2.8 |
2020-05-13 |
—
|
CVE-2020-12832
The Simple File List plugin prior to version 4.2.8 contains a flaw that allows attackers to remove files of their choosing due to insufficient validation of user input. This vulnerability enables unauthorized deletion of arbitrary files on the affected system.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings