anonhaven
Ad

CVE-2026-118437

NONE EPSS 0.16%
Обновлено 31 октября 2026
Unknown
Параметр Значение
Уязвимые версии до 2.10.1
Тип уязвимости CWE-73 External Control of File Name or Path
Поставщик Unknown
Публичный эксплойт Нет

The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploaded attachments, allowing unauthenticated attackers to permanently delete media files uploaded by other unauthenticated visitors.

Тип уязвимости (CWE)

CWE-73 External Control of File Name or Path

Уязвимые продукты

unknown:buddyforms

Ссылки 1

https://wpscan.com/vulnerability/20a483cf-7003-4d5a-9abb-afcc3f985ee4/
contact@wpscan.com
Share Post Share Share Share

Связанные уязвимости

CVE-2026-94361

Unknown

None

CVE-2026-82214

Unknown

None

CVE-2026-118638

Unknown

None

CVE-2026-118629

Unknown

None

CVE-2026-118438

Unknown

None