Threats tagged 'ghsa-pwpg-m6pr-8g76'

The Pay with a tweet WordPress plugin versions through 1.0.5 contains a vulnerability where it does not validate file paths before deleting files and lacks access restrictions on administration screens. This flaw allows users with the Subscriber role to delete arbitrary files on the server, potentially leading to full site compromise.