Description
WordPress Simple File List 插件是一款用于管理文件列表的插件，广泛应用于 WordPress 网站中。该插件的 /wp-content/plugins/simple-file-list/ee-upload-engine.php 文件存在代码执行漏洞（CVE-2025-34085）。攻击者可以通过该漏洞上传恶意文件并执行任意代码，从而完全控制受影响的 WordPress 网站。
WordPress Simple File List 插件 /wp-content/plugins/simple-file-list/ee-upload-engine.php 文件上传漏洞 （CVE-2025-34085）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-34085
https://github.com/0xgh057r3c0n/CVE-2025-34085
https://www.exploit-db.com/exploits/52371
https://wpscan.com/vulnerability/365da9c5-a8d0-45f6-863c-1b1926ffd574/
https://vuldb.com/vuln/315600
https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-34085
https://www.rapid7.com/db/modules/exploit/multi/http/wp_simple_file_list_rce/
https://patchstack.com/database/wordpress/plugin/simple-file-list/vulnerability/wordpress-simple-file-list-plugin-4-2-2-unauthenticated-arbitrary-file-upload-vulnerability-leading-to-remote-code-execution-rce