Threats tagged 'ghsa-x2hm-rp6m-pffv'

The CYAN Backup plugin for WordPress contains a vulnerability in its file deletion functionality due to insufficient file path validation. This flaw affects all versions up to and including 2.5.4. Authenticated users with Administrator-level privileges or higher can exploit this to delete arbitrary files on the server, potentially leading to remote code execution if critical files like wp-config.php are removed.