Threats tagged 'ghsa-9x42-3vcf-9whh'

The Somatic Framework WordPress plugin versions up to 1.8.14 contain a vulnerability where no authorization check or validation of user-supplied file paths is performed before deleting files. This flaw allows any authenticated user, including low-privileged roles such as subscribers, to delete arbitrary files on the server. Exploitation of this vulnerability can lead to a full site takeover.