CVE-2025-60217

CVE-2025-60217 describes a path traversal vulnerability in WordPress PT Luxa Addons (pt-luxa-addons) affecting versions up to 1.2.2. Multiple sources (NVD, Red Hat, CVE List, CNNVD, EUVD, vulnrichment, Patchstack) concur that improper restriction of pathname access enables path traversal, with Pa...

CVE-2025-60217 WordPress PT Luxa Addons Plugin <= 1.2.2 - Arbitrary File Deletion Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ypromo PT Luxa Addons pt-luxa-addons allows Path Traversal.This issue affects PT Luxa Addons: from n/a through = 1.2.2...

CVE-2025-59566 WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AmentoTech Workreap theme's plugin workreap allows Path Traversal.This issue affects Workreap theme's plugin: from n/a through = 3.3.5...

CVE-2025-59566 WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AmentoTech Workreap theme's plugin workreap allows Path Traversal.This issue affects Workreap theme's plugin: from n/a through = 3.3.5...

CVE-2025-59566

The CVE-2025-59566 entry concerns a path traversal flaw in the WordPress Workreap (theme’s plugin) package, affecting versions up to and including 3.3.5. The vulnerability arises from improper limitation of a pathname to a restricted directory, enabling traversal and potential arbitrary file dele...

CVE-2025-58959

The CVE-2025-58959 entry corresponds to a path traversal flaw in WordPress Taskbot (plugin Taskbot) versions up to and including 6.4. The underlying issue is improper limitation of a pathname to a restricted directory, enabling traversal attacks. In affected reports from Red Hat/NVD/CVE listings,...

CVE-2025-58959 WordPress Taskbot plugin <= 6.4 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AmentoTech Taskbot taskbot allows Path Traversal.This issue affects Taskbot: from n/a through = 6.4...

CVE-2025-58959 WordPress Taskbot plugin <= 6.4 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AmentoTech Taskbot taskbot allows Path Traversal.This issue affects Taskbot: from n/a through = 6.4...

CVE-2025-5496

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component...

CVE-2025-10916

The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server...

WordPress FormGent plugin < 1.0.4 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin FormGent versions 1.0.4...

CVE-2025-5496

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component...

CVE-2025-5496

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component...

CVE-2025-5496 Arbitrary File Deletion

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component...

CVE-2025-5496 Arbitrary File Deletion

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component...

CVE-2025-5496

ZohoCorp ManageEngine Endpoint Central is affected by an arbitrary file deletion vulnerability in the agent setup component for versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01. The issue is described as a local vulnerability with low impact to integrity and no confidentiality/a...

EUVD-2025-35163

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component...

EUVD-2025-35137

The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server...

CVE-2025-10916

The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server...

CVE-2025-10916

CVE-2025-10916 affects the FormGent WordPress plugin prior to 1.0.4. The vulnerability arises from insufficient file path validation, allowing unauthenticated attackers to delete arbitrary server files. Public references from multiple feeds (Pre‑published and after) corroborate the impact as unau...