Threats tagged 'ghsa-f2vc-gg64-xmgf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2025-12000The WPFunnels plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation Medium6.52025-11-08GCVE DatabaseCVE-2025-12000 The WPFunnels WordPress plugin up to version 3.6.2 contains a vulnerability in the wpfnl_delete_log() function that allows authenticated administrators to delete arbitrary files on the server. This occurs due to insufficient validation of file paths. Exploiting this flaw can lead to remote code execution if critical files like wp-config.php are deleted. Report on CVE-2025-12000 Vulnerability CWE-22 #ghsa-f2vc-gg64-xmgf	GCVE Database	2025-11-08

Page 1 of 1