The Betheme WordPress theme contains an arbitrary file deletion vulnerability in versions up to and including 28.4. This flaw arises from the upload_icons() function, which improperly handles a user-controlled upload path, allowing authenticated users with contributor-level access or higher to delete arbitrary local files via path traversal.