Path Traversal Vulnerability in Mitchell Bennis Simple File List Plugin

CVE-2026-24953

What is CVE-2026-24953?

The Simple File List plugin by Mitchell Bennis is susceptible to a Path Traversal vulnerability, which may allow an attacker to access unauthorized directories and files on the server. This security flaw affects versions up to and including 6.1.15. An attacker could exploit this weakness by crafting a specially designed request, thus gaining access to sensitive files within the restricted directory. Website administrators using this plugin should take immediate action to mitigate potential risks by upgrading to the latest version and reviewing their file permissions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References