A vulnerability classified as critical was found in eemitch Simple File List Plugin up to 6.3.7 on WordPress. Affected by this vulnerability is the function is_admin of the component Setting Handler . Executing a manipulation of the argument AllowFrontManage can lead to missing authorization. This vulnerability is handled as CVE-2026-11912 . The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.