Mitchell Bennis Simple File List Missing Authorization Vulnerability Allowing Access Control Bypass

A missing authorization vulnerability has been identified in the Mitchell Bennis Simple File List WordPress plugin, affecting versions through 6.1.13. This vulnerability allows for exploitation of improperly configured access control security levels, potentially leading to unauthorized changes in settings.

Impact

Exploitation of this vulnerability could result in unauthorized changes to plugin settings, allowing attackers to manipulate file list management features.

Remediation

Users of the Simple File List WordPress plugin should update to version 6.1.14 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.