https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T00:18:58.642940+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-16616 fkie_cve-2026-16616 2026-10-07T00:18:59.903746+00:00

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure and potential site takeover.

 https://vulnerability.circl.lu/vuln/ghsa-jff9-wc66-9356 GHSA-jff9-wc66-9356 2026-10-07T00:18:59.903872+00:00

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure and potential site takeover.