Path Traversal Vulnerability in Simple File List by Mitchell Bennis

CVE-2025-54021

What is CVE-2025-54021?

A path traversal vulnerability exists in the Simple File List plugin developed by Mitchell Bennis, enabling unauthorized users to access restricted directories and files. This flaw allows malicious actors to exploit the plugin across versions up to and including 6.1.14, potentially leading to arbitrary file downloads and further security compromises. It is crucial for users to update and secure their installations to mitigate risks associated with this vulnerability.

References