VulnSocial

CVE-2020-36847Active Exploitation(simplefilelist / simple_file_list)

LOWCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for simplefilelist simple_file_list systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename function which can be used to rename uploaded PHP code with a png extension to use a php extension. This allows unauthenticated attackers to execute code on the server.

simplefilelist CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-434

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • simple_file_list

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
simplefilelist
Products
simple_file_list

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-12: 1Active Exploitation · 2026-07-12: 107-12
Signal classification1 categories
Active Exploitation
1100.0%
Full discourse1 post
  • Rıdvan Yağlı@ridvanyagli
    Active Exploitation

    Saldırganların WordPress, Joomla gibi sistemlere saldırırken kullandığı CVE'ler : – CVE-2026-3844 (WordPress Breeze) – CVE-2026-48907 (Joomla JCE) Diğerleri: CVE-2026-1969, CVE-2026-3300, CVE-2026-0740, CVE-2026-6433, CVE-2025-7443, CVE-2025-7852, CVE-2025-12057, CVE-2020-36847 ve CVE-2020-25213

    Post summary

    The post claims attackers actively use a set of CVEs to target WordPress and Joomla, but provides no exploit code, patches, or technical details about the vulnerabilities.

    1301142.4K
    2.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsimplefilelistsimple_file_list-wordpress-

Explore more

Back to dashboardsimplefilelist CVEssimple_file_list vulnerabilities