CVE-2026-34968 Adminer before 5.4.3 Arbitrary File Deletion via SQLite Drop

Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db parameter to delete any files writable by the P...

EUVD-2026-65199

Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db parameter to delete any files writable by the P...

EUVD-2026-65159

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2026-78284

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2026-78284 WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...

CVE-2026-78284

CVE-2026-78284 is an unauthenticated arbitrary file deletion vulnerability in the MasterStudy LMS WordPress plugin, affecting versions 3.7.42 and earlier . An attacker can delete files on the server without any authentication or user interaction. The CVSS 3.1 base score is 8.6 (HIGH) , driven by ...

CVE-2026-75464

OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...

CVE-2026-32477

Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...

CVE-2026-28171

Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...

CVE-2026-32477 WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin <= 2.2.0 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...

EUVD-2026-64801

Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...

CVE-2026-28171 WordPress WooCommerce File Approval plugin <= 10.7 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...

EUVD-2026-64797

Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...

CVE-2026-28171

CVE-2026-28171 is an unauthenticated arbitrary file deletion vulnerability in the WooCommerce File Approval WordPress plugin, affecting versions 10.7 and earlier . An unauthenticated remote attacker can delete arbitrary files on the server, leading to a high availability impact with changed scope...

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 Dimostrazione di concetto PoC Descrizione Questo repository contiene un exploit Proof of Concept PoC per CVE-2023-6972. La vulnerabilità consente la cancellazione arbitraria di file non autenticata AFD nel plugin Wordpress Backup Migration Nota: Un'analisi tecnica completa, un caso ...

EUVD-2026-65146

OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...

CVE-2026-75464

OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...

CVE-2026-24135

CVE-2026-24135: Eliminazione arbitraria di file in Gogs tramite path traversal nel Wiki Gravità: Alta CVSS 7.5 Software interessato: Gogs Corretto in: 0.13.4, 0.14.0+dev Avviso: GHSA-jp7c-wj6q-3qf2 Patch: gogs/gogs8099 Riepilogo Durante un audit di sicurezza di Gogs un popolare servizio Git...

CVE-2026-60084

SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint that accepts an unvalidated path parameter passed directly to os.RemoveAll. Authenticated admin attackers can supply absolute filesystem paths to recursively delete any file o...

CVE-2026-60084

SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint. The endpoint accepts an unvalidated path parameter that is passed directly to os.RemoveAll, allowing an authenticated admin attacker to supply absolute filesystem paths and r...