A vulnerability classified as critical was found in eemitch Simple File List Plugin up to 6.3.7 on WordPress. Affected by this vulnerability is the function
is_admin of the component Setting Handler. Executing a manipulation of the argument AllowFrontManage can lead to missing authorization.
This vulnerability is handled as CVE-2026-11912. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.