Missing Authorization Vulnerability in Simple File List by Mitchell Bennis

CVE-2025-47450

What is CVE-2025-47450?

The Simple File List plugin, created by Mitchell Bennis, has a vulnerability that stems from missing authorization checks. This issue may allow attackers to exploit incorrectly configured access control security levels, leading to unauthorized access to sensitive files. The vulnerability affects all versions up to and including 6.1.13, highlighting the importance of securing file management plugins within WordPress installations. Users are encouraged to review their configurations and update accordingly to mitigate potential risks.

References