Hi,
6.1.16 was released two weeks ago, addressing this and a few other issues…
https://wordpress.org/plugins/simple-file-list/#developers
Mitch
For some reason the 6.1.16 update was not showing up in my WP dashboard so I downloaded it from your link and updated it manually but I am now getting a <= 6.1.16 – Broken Access Control vulnerability warning error from Solid Security. I don’t think this update fixed the issue.
Appreciate your help! I just wanted to make you aware that Solid Security is still detecting the vulnerability during site scan.
LMK if you’d like any additional details.
I did release 6.1.17 to address the Patchstack CVE
Unfortunately or fortunately, I believe we’ll be seeing more and more of this as bug hunters using AI pore over all the code they can get their hands on so they can get paid bounties by companies like Patchstack. Developers like my self are trying to get ahead by using our own AI, as well as the great tools that WordPress gives us, like PCP.
In the end we should end up with much better code.
I get a clean scan now with the 6.1.17 update! Thx so much for such a great plugin and for all your quick support! 🙂
This was addressed in 6.1.16.
Be wary of Patchstack. They have questionable business practices, in my opinion. Protecting you is not one of them.
