0.0004 Low
EPSS
Percentile
13.3%
The plugin does not validate path of files to be deleted, which could allow users with a role of Author and above to delete files (with an allowed extension)