Threats tagged 'ghsa-8m6g-3645-wc49'

The BuddyForms WordPress plugin versions before 2.10.1 contain a vulnerability where the plugin does not properly verify ownership before deleting guest-uploaded attachments. This flaw allows unauthenticated attackers to permanently delete media files uploaded by other unauthenticated visitors.