CVE-2026-12277

The CVE-2026-12277 entry concerns the Frontend File Manager Plugin for WordPress (≤ 23.6). The vulnerability arises because the plugin does not validate a file path derived from user input before deleting the referenced file, enabling unauthenticated users to delete arbitrary server files (e.g., ...