Skip to content
PluginCanary

Simple File List

Fewer than 10 active installs · Checked 3 Nov 2026
Avoid4 Criticals

Avoid: Simple File List is closed on wordpress.org and no longer gets updates.

10/ 100 Canary Score

Capped at 10 because the plugin is closed.

Sub-scores for Simple File List
Ownership100
Maintenance10
Security0
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 5 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.19 Oct 2026Evidence
  • CriticalSEC-2Vulnerability published 21 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.4 Sep 2026Evidence
  • CriticalSEC-2Vulnerability published 21 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.4 Sep 2026Evidence
  • CriticalCLS-1Closed on wordpress.org on 23 Jul 2026, reason: security issue. Replace this plugin. It no longer receives updates from wordpress.org.23 Jul 2026Evidence
  • InfoSEC-311 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
not recorded
Releases, 24 months
0
Tested up to
not stated vs 7.1
Requires PHP
not stated supported 8.2+

Release history builds as we see new versions.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
5 Oct 2026Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Deletion9.1<= 6.3.11No fixn/a
21 Aug 2026Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read7.5<= 6.3.11No fixn/a
21 Aug 2026Simple File List <= 6.3.11 - Unauthenticated Stored Cross-Site Scripting7.2<= 6.3.11No fixn/a
7 Jul 2026Simple File List <= 6.3.8 - Reflected Cross-Site Scripting6.1<= 6.3.86.3.9n/a
19 Jun 2026Simple File List <= 6.3.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute6.5<= 6.3.76.3.8n/a
19 Jun 2026Simple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter7.5<= 6.3.76.3.8n/a
19 Jun 2026Simple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action7.5<= 6.3.76.3.8n/a
9 Feb 2026Simple File List <= 6.1.15 - Authenticated (Subscriber+) Arbitrary File Download6.5<= 6.1.156.1.16n/a
25 Dec 2025Simple File List <= 6.3.7 - Missing Authorization4.3<= 6.3.76.3.8n/a
28 Jul 2025Simple File List <= 6.1.14 - Unauthenticated Arbitrary File Download5.3<= 6.1.146.1.15n/a
7 May 2025Simple File List <= 6.1.13 - Missing Authorization to Unauthenticated Minor Settings Update5.3<= 6.1.136.1.14n/a
24 Oct 2024Simple File List <= 6.1.11 - Reflected Cross-Site Scripting6.1<= 6.1.126.1.13n/a
12 Oct 2023Simple File List <= 6.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings4.4<= 6.1.96.1.10n/a
28 Sep 2023Simple File List <= 6.1.9 - Unauthenticated Arbitrary File Deletion9.1<= 6.1.96.1.10n/a
28 Feb 2023Simple File List <= 6.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 6.0.96.0.10n/a
19 Sep 2022Simple File List <= 4.4.12 - Cross-Site Request Forgery to Page Creation8.8<= 4.4.124.4.13n/a
19 Sep 2022Simple File List <= 4.4.11 - Reflected Cross-Site Scripting6.1<= 4.4.114.4.12n/a
26 Aug 2022Simple File List <= 4.4.11 - Reflected Cross-Site Scripting6.1<= 4.4.114.4.12n/a
2 Nov 2020Simple File List < 4.2.3 - Remote Code Execution9.8< 4.2.34.2.3n/a
16 May 2020Simple File List <= 4.2.7 - Arbitrary File Deletion6.5<= 4.2.74.2.8n/a
23 May 2019Simple File List <= 3.2.4 - Arbitrary File Deletion8.6<= 3.2.43.2.5n/a
23 May 2019Simple File List <= 3.2.7 - Arbitrary File Download7.5<= 3.2.73.2.8n/a

Source: Wordfence Intelligence.

Reputation

No ratings yet.

Momentum

Fewer than 10 active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Versionnot stated
Authornot stated
Addednot stated
Last updatednot stated
Active installsFewer than 10
Requires WordPressnot stated
Tested up tonot stated
Requires PHPnot stated
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsnot stated

Questions

Is Simple File List still maintained?

No. Simple File List was closed on wordpress.org on 23 Jul 2026 (security issue) and gets no updates there.

Is Simple File List safe?

Simple File List has 3 published vulnerabilities with no patched version. Its Canary status is Avoid.

Who owns Simple File List?

The wordpress.org author is not listed. We have recorded no ownership change.

What can I use instead of Simple File List?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue