CVE-2024-12035

The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cswidgetfiledelete function in all versions up to, and including, 6.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to dele...

CVE-2024-12035

creationtimestamp| type| source ---|---|--- 2025-03-07 08:35:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6819 2025-03-07 11:48:58+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114120991550927514 2025-03-08 04:34:56+00:00| seen|...

CVE-2024-12035 CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion

The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cswidgetfiledelete function in all versions up to, and including, 6.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to dele...