CVE · High

CVE-2025-54021 — Simple File List [simple-file-list] < 6.1.15

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-54021 Simple File List [simple-file-list] < 6.1.15 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') High 7.5 < 6.1.15 6.1.15 2025-07-28

CVE-2025-54021

A security flaw has been identified in Simple File List plugin for WordPress, affecting all versions prior to 6.1.15. The issue allows unauthorized access to server files containing confidential data through a technique known as path manipulation. This vulnerability is present in versions up to and including 6.1.14.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.