CVE

CVE-2020-12832

9.8

CVSS

Description

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input.

Attack Vector

Privileges Req.

User Interaction

Updated Nov 10, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

WordPress Simple File List - Path Traversal

Simple File List plugin allows path traversal via file upload, enabling files to be written outside the upload directory. References: https://wpscan.com/vulnerability/422360b9-4c70-4fd9-9833-375f1294bd7a/ http://nvd.nist.gov/vuln/detail/CVE-2020-12832 Remediation: Update to version 4.2.8 or later.

Used 20 times · 10 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →