CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1119

The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php file due to missing controls which makes it possible unauthenticated attackers to supply a path to a file that will subsequently be downloaded, in versions up to and including 3.2.7.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.913

EPSS Ranking 99.6%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2022-1119

Simplefilelist » Simple-File-List » Version: N/A

cpe:2.3:a:simplefilelist:simple-file-list:-
Simplefilelist » Simple-File-List » Version: 1.0

cpe:2.3:a:simplefilelist:simple-file-list:1.0
Simplefilelist » Simple-File-List » Version: 1.0.1

cpe:2.3:a:simplefilelist:simple-file-list:1.0.1
Simplefilelist » Simple-File-List » Version: 1.0.2

cpe:2.3:a:simplefilelist:simple-file-list:1.0.2
Simplefilelist » Simple-File-List » Version: 1.0.3

cpe:2.3:a:simplefilelist:simple-file-list:1.0.3
Simplefilelist » Simple-File-List » Version: 1.0.4

cpe:2.3:a:simplefilelist:simple-file-list:1.0.4
Simplefilelist » Simple-File-List » Version: 2.0.7

cpe:2.3:a:simplefilelist:simple-file-list:2.0.7
Simplefilelist » Simple-File-List » Version: 2.0.8

cpe:2.3:a:simplefilelist:simple-file-list:2.0.8
Simplefilelist » Simple-File-List » Version: 3.0.4

cpe:2.3:a:simplefilelist:simple-file-list:3.0.4
Simplefilelist » Simple-File-List » Version: 3.0.5

cpe:2.3:a:simplefilelist:simple-file-list:3.0.5
Simplefilelist » Simple-File-List » Version: 3.0.6

cpe:2.3:a:simplefilelist:simple-file-list:3.0.6
Simplefilelist » Simple-File-List » Version: 3.1.1

cpe:2.3:a:simplefilelist:simple-file-list:3.1.1
Simplefilelist » Simple-File-List » Version: 3.1.2

cpe:2.3:a:simplefilelist:simple-file-list:3.1.2
Simplefilelist » Simple-File-List » Version: 3.2

cpe:2.3:a:simplefilelist:simple-file-list:3.2
Simplefilelist » Simple-File-List » Version: 3.2.1

cpe:2.3:a:simplefilelist:simple-file-list:3.2.1
Simplefilelist » Simple-File-List » Version: 3.2.2

cpe:2.3:a:simplefilelist:simple-file-list:3.2.2
Simplefilelist » Simple-File-List » Version: 3.2.3

cpe:2.3:a:simplefilelist:simple-file-list:3.2.3
Simplefilelist » Simple-File-List » Version: 3.2.4

cpe:2.3:a:simplefilelist:simple-file-list:3.2.4
Simplefilelist » Simple-File-List » Version: 3.2.5

cpe:2.3:a:simplefilelist:simple-file-list:3.2.5
Simplefilelist » Simple-File-List » Version: 3.2.6

cpe:2.3:a:simplefilelist:simple-file-list:3.2.6
Simplefilelist » Simple-File-List » Version: 3.2.7

cpe:2.3:a:simplefilelist:simple-file-list:3.2.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1119

Products

Pricing

Contact Us