WordPress Paid Videochat Turnkey Site plugin <= 7.2.12 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by muhammad yudha Patchstack Alliance in WordPress Plugin Paid Videochat Turnkey Site versions = 7.2.12...

WordPress WP Job Portal plugin <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion vulnerability

Insecure Direct Object Reference to Authenticated Employer+ Arbitrary Company Deletion vulnerability discovered by thevietronin in WordPress Plugin WP Job Portal versions = 2.2.6...

WordPress Drag and Drop Multiple File Upload – Contact Form 7 plugin <= 1.3.8.5 - Limited Arbitrary File Deletion vulnerability

Limited Arbitrary File Deletion vulnerability discovered by theviper17y in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions = 1.3.8.5...

WordPress 12 Step Meeting List plugin <= 3.16.5 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Mika in WordPress Plugin 12 Step Meeting List versions = 3.16.5...

CVE-2024-12957

A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion. Refer to the '01/23/2025 Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information...

Dell Display Manager Multiple Vulnerabilities (DSA-2025-033)

The version of Dell Display Manager on the remote Windows host is version 2.3.2.20. It is, therefore affected by multiple vulnerabilites. - A Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability,...

WordPress WP Cloud plugin <= 1.4.3 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by SOPROBRO in WordPress Plugin WP Cloud versions = 1.4.3...

CVE-2024-13318

CVE-2024-13318 affects the Essential WP Real Estate WordPress plugin. The vulnerability is due to a missing capability check in cl_delete_listing_func() across all versions up to 1.1.3, allowing unauthenticated attackers to delete arbitrary pages and posts. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC...

CVE-2024-13318 Essential WP Real Estate <= 1.1.3 - Missing Authorization to Arbitrary Post/Page Deletion

The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cldeletelistingfunc function in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated attackers to delete arbitrary pages and posts...

WordPress AdForest theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post/Attachment Deletion vulnerability discovered by Lucio Sá in WordPress Theme AdForest versions = 5.1.7...

CVE-2024-52535

CVE-2024-52535 affects Dell SupportAssist for Home PCs (versions ≤ 4.6.1) and Dell SupportAssist for Business PCs (versions ≤ 4.5.0). The issue is a symbolic link (symlink) attack in the software remediation component that could be exploited by a low-privileged authenticated user to escalate priv...

WordPress LifterLMS <= 7.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Deletion vulnerability discovered by Lucio Sá in WordPress Plugin LifterLMS versions = 7.8.5...

Veeam Service Provider Console 安全漏洞

Veeam Service Provider Console is a cloud-enabled platform from Veeam USA. A security vulnerability exists in Veeam Service Provider Console. An attacker could exploit the vulnerability to delete arbitrary files on the VSPC server machine...

WordPress Ultimate YouTube Video & Shorts Player With Vimeo plugin <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Playlist/Video Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Playlist/Video Deletion vulnerability discovered by Mika in WordPress Plugin Ultimate YouTube Video & Shorts Player With Vimeo versions = 3.3...

CVE-2024-50052 Arbitrary post deletion via Playbooks /ignore-thread endpoint

Mattermost versions 9.10.x = 9.10.2, 9.11.x = 9.11.1, 9.5.x = 9.5.9 fail to check that the origin of the message in an integration action matches with the original post metadata which allows an authenticated user to delete an arbitrary post...

WordPress Analyse Uploads plugin <= 0.5 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Analyse Uploads versions = 0.5...

CVE-2024-7603

Logsign Unified SecOps Platform Directory Traversal Arbitrary Directory Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary directories on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The...

GO-2022-0442 Arbitrary file deletion in gitea in code.gitea.io/gitea

Arbitrary file deletion in gitea in code.gitea.io/gitea...

WordPress Plugin Notes Plus plugin <= 1.2.7 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Plugin Notes Plus versions = 1.2.7...

CVE-2024-41332

Incorrect access control in the deletecategory function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories...