CVE-2026-39792

Mitchell Bennis Simple File List

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

8.6 High · CVSS 3.1, patchstack.com

Description

Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.

References

patchstack.com/database/wordpress/plugin/simple-file-list/vulnerability/wordpress-simple-file-list-plugin-6-3-11-arbitrary-file-deletion-vulnerability?_s_id=cve