CVE-2022-1119 Scanner
Detects 'Arbitrary File Download' vulnerability in Simple File List plugin for WordPress affects v. up to and including 3.2.7.
Used 2.1k times · 5.9k assets checked · url
CVE
CVE-2022-1119
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php file due to missing controls which makes it possible unauthenticated attackers to supply a path to a file that will subsequently be downloaded, in versions up to and including 3.2.7.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
simple file list
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: simple file list
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →