Description
WordPress Plugin Simple File List is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to delete arbitrary files in the context of the webserver process. WordPress Plugin Simple File List version 4.2.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 4.2.8 or latest
References
https://ctulhu.me/2020/05/16/cve-2020-12832/
https://plugins.svn.wordpress.org/simple-file-list/trunk/readme.txt
Related Vulnerabilities
Citrix ADC NetScaler Local File Inclusion (CVE-2020-8193)
WordPress Plugin WP Socializer-Simple & Easy Social Media Share Icons Cross-Site Scripting (7.2)
Drupal Core 5.x Cross-Site Scripting (5.0 - 5.16)
ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-0204)