CVE · Critical

CVE-2020-12832 — Simple File List [simple-file-list] < 4.2.8

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2020-12832 Simple File List [simple-file-list] < 4.2.8 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Critical 9.8 < 4.2.8 4.2.8 2020-05-13

CVE-2020-12832

The Simple File List plugin prior to version 4.2.8 contains a flaw that allows attackers to remove files of their choosing due to insufficient validation of user input. This vulnerability enables unauthorized deletion of arbitrary files on the affected system.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.