mmm simple file list vulnerabilities

Products

• mmm simple file list 1

Latest mmm simple file list CVEs

Newest publication first

1. CVE-2023-4297 Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing

   Published 2023-11-27

   Medium·CVSS 4.3 EPSS 0.77%

   The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.