CVE-2023-44227

The Simple File List plugin for WordPress through version 6.1.9 contains an arbitrary file deletion vulnerability caused by inadequate validation of files submitted to the deletion function. Unauthenticated attackers can exploit this flaw to remove arbitrary files from the server, potentially resulting in denial of service or remote code execution if critical files like wp-config.php are targeted.

Based on public CVE data (MITRE/NVD).