CVE-2026-22448

PitchPrint WordPress plugin (flexcubed PitchPrint) <= 11.1.2 is reported to have an improper pathname restriction (path traversal) vulnerability that enables unauthenticated deletion of arbitrary files. The CVE entry CVE-2026-22448 and related Red Hat/ENISA/CVE references confirm affected vers...