Description
WordPress Plugin Simple File List is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to delete arbitrary files in the context of the webserver process. WordPress Plugin Simple File List version 4.2.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 4.2.8 or latest
References
https://ctulhu.me/2020/05/16/cve-2020-12832/
https://plugins.svn.wordpress.org/simple-file-list/trunk/readme.txt
Related Vulnerabilities
Skipper : Missing Authentication for Critical Function Vulnerability (CVE-2026-54246)
ATutor Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-2539)
WordPress Plugin Game Server Status Multiple Vulnerabilities (1.0)
PostgreSQL CVE-2021-32029 Vulnerability (CVE-2021-32029)
WordPress Plugin Bangla Sidebar Login Cross-Site Scripting (1.0)