CRITICAL

CVE-2020-12832

CVSS v3

9.8

CRITICAL

EPSS Score

76.3%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input.

Technical details

Published
5/13/2020

Frequently asked questions

What is CVE-2020-12832?

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input.

Is CVE-2020-12832 actively exploited?

Active exploitation of CVE-2020-12832 has not been confirmed. The EPSS score is 76.3%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-12832?

CVE-2020-12832 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2020-12832 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.