Simple File List

76 Quality Score

Active Installs

16/30

A 52 score reflects only around 3,000 active installs, which is modest and suggests a niche audience rather than broad mainstream adoption.

Update Freshness

25/25

A perfect 100 score is justified by the recent June 2026 update and clean compatibility with the latest WordPress core.

User Rating

13/15

An 86 average rating from 27 reviewers is solid, though the small sample size means a few strong opinions carry significant weight.

Support Health

8/15

A 50 score is earned by just one support thread ever recorded with zero marked resolved, which is a meaningful warning sign for anyone relying on help.

WP Compatibility

15/15

A 100 score reflects a current WordPress 7.0 test pass and a modern PHP 8.1 requirement that aligns with current hosting standards.

Scores higher than 49% of indexed plugins

About

Simple File List is a powerful WordPress file manager. Publish a file library anywhere on your site — let users browse, download, upload, share and pl …

Active Installs 3k+

Rating ★★★★ 4.3/5

Last Updated 2026-06-22 8:32pm GMT

Requires WordPress 6.0+

Tested Up To 7.0

Requires PHP 8.1+

Security History

20 known vulnerabilities, all patched

2 Critical 7 High 11 Medium

Most recent: August 21, 2026

View details ▸

Simple File List <= 6.3.11 - Unauthenticated Stored Cross-Site Scripting High

August 21, 2026 Patched in [] CVE-2026-16617

Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read High

August 21, 2026 Patched in [] CVE-2026-16616

Simple File List <= 6.3.8 - Reflected Cross-Site Scripting Medium

July 7, 2026 Patched in ["6.3.9"] CVE-2026-57382

Simple File List <= 6.3.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute Medium

June 19, 2026 Patched in ["6.3.8"] CVE-2026-12119

Simple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter High

June 19, 2026 Patched in ["6.3.8"] CVE-2026-11911

Simple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action High

June 19, 2026 Patched in ["6.3.8"] CVE-2026-11912

Simple File List <= 6.1.15 - Authenticated (Subscriber+) Arbitrary File Download Medium

February 9, 2026 Patched in ["6.1.16"] CVE-2026-24953

Simple File List <= 6.3.7 - Missing Authorization Medium

December 25, 2025 Patched in ["6.3.8"] CVE-2025-68591

Simple File List <= 6.1.14 - Unauthenticated Arbitrary File Download Medium

July 28, 2025 Patched in ["6.1.15"] CVE-2025-54021

Simple File List <= 6.1.11 - Reflected Cross-Site Scripting Medium

October 24, 2024 Patched in ["6.1.13"] CVE-2024-10146

Simple File List <= 6.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings Medium

October 12, 2023 Patched in ["6.1.10"] CVE-2023-39924

Simple File List <= 6.1.9 - Unauthenticated Arbitrary File Deletion Critical

September 28, 2023 Patched in ["6.1.10"] CVE-2023-44227

Simple File List <= 6.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

February 28, 2023 Patched in ["6.0.10"] CVE-2023-1025

Simple File List <= 4.4.11 - Reflected Cross-Site Scripting Medium

September 19, 2022 Patched in ["4.4.12"] CVE-2022-3207

Simple File List <= 4.4.12 - Cross-Site Request Forgery to Page Creation High

September 19, 2022 Patched in ["4.4.13"] CVE-2022-3208

Simple File List <= 4.4.11 - Reflected Cross-Site Scripting Medium

August 26, 2022 Patched in ["4.4.12"] CVE-2022-3062

Simple File List < 4.2.3 - Remote Code Execution Critical

November 2, 2020 Patched in ["4.2.3"] CVE-2020-36847

Simple File List <= 4.2.7 - Arbitrary File Deletion Medium

May 16, 2020 Patched in ["4.2.8"] CVE-2020-12832

Simple File List <= 3.2.4 - Arbitrary File Deletion High

May 23, 2019 Patched in ["3.2.5"]

Simple File List <= 3.2.7 - Arbitrary File Download High

May 23, 2019 Patched in ["3.2.8"] CVE-2022-1119

What It Does

Simple File List turns a WordPress site into a private or public document library where visitors can browse, download, and (optionally) upload files through shortcodes embedded in pages or posts. It works independently of the WordPress Media Library, letting administrators manage directories and file permissions from a dedicated settings panel.

Who It's For

This plugin fits small businesses and professional service firms that need a simple, branded file-sharing portal for clients or staff without setting up FTP or third-party cloud storage. It is well suited for law offices, real estate teams, and nonprofits distributing documents like contracts, property listings, or resource packs.

Who Should Skip It

Skip this plugin if you run a media-heavy site that needs deep integration with the standard WordPress Media Library or if you want a drop-in download tracking and analytics solution, since richer alternatives such as Download Monitor or FileBird cover those scenarios with far larger user bases.

The Bottom Line

Simple File List scores 75.97/100 with strong maintenance and compatibility but only 3,000 installs and a thin support track record. It is a reasonable choice for users who specifically need a standalone file sharing portal, yet most teams will be safer picking Download Monitor for tracking or one of the larger media-library managers for file organization.

Related Plugins

Download Monitor 90/100

Pick Download Monitor instead if you need download counts, user tracking, and reporting on file distribution.

File Manager 88/100

Pick File Manager instead if you want a full FTP-like interface inside wp-admin with broad community support.

FileOrganizer – WordPress File Manager 86/100

Pick FileOrganizer instead if your priority is organizing files inside the standard Media Library with a folder tree.

FileBird – WordPress Media Library Folders & File Manager 85/100

Pick FileBird if you need intuitive folder organization for the Media Library and have a content-heavy site with 200,000+ peers using it.

File Manager Pro – Filester 85/100

Pick Filester if you want a polished media library folder system with modern UI and stronger social proof.

Use Cases

law firm document management real estate agent property listings construction company project files nonprofit resource library educational institution assignment submission marketing agency client asset sharing medical practice patient records access small business vendor collaboration podcast show notes and resources consulting firm deliverables portal