Simple Downloads List
Simple Downloads List has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include SQL Injection.
Every one of the 2 issues recorded for Simple Downloads List has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Simple Downloads List is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-13594Simple Downloads List <= 1.4.2 - Authenticated (Contributor+) SQL Injection
Read the full analysisVulnerability Records
Simple Downloads List
Author
Neofix
Simple Downloads List allows you to provide multiple downloads as a beautiful list for your visitors. Simply add your downloads in the admin section and start using the block or shortcode. Main features: Fully free – there’s no pro version Mobile friendly list design A search bar allows your visitors to search for downloads Filtering possible using categories How to use Using WordPress block: Add new “Simple Downloads List” Block and (optionally) filter category within the sidepanel Using shortcode: Simply add this shortcode [neofix_sdl category=""] category: Which categories should be displayed? If this option is missing or empty, all downloads will be visible.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C