https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:01:46.828535+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-1119 CVE-2022-1119 — Simple File List <= 3.2.7 - Arbitrary File Download 2026-10-06T06:01:46.844898+00:00

Affected: eemitch Simple File List

The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php file due to missing controls which makes it possible unauthenticated attackers to supply a path to a file that will subsequently be downloaded, in versions up to and including 3.2.7.