WordPress HTML2WP plugin arbitrary file deletion vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress HTML2WP plugin 1.0.0 and earlier versions have an arbitrary file deletion vulnerability, the source of the vulnerability is not authorized and CSRF checks in AJAX operations, an authenticated attacker can use this vulnerability to delete arbitrary files.