Threats tagged 'ghsa-m2cg-gh5f-5vp8'

The FluentCart WordPress plugin up to version 1.6.2 contains a vulnerability allowing authenticated users with custom-level access or higher to delete arbitrary files on the server due to insufficient file path validation in the deleteFile function. This flaw can lead to remote code execution if critical files like wp-config.php are deleted.