Lucene search

K
wpvulndbWpvulndbWPVDB-ID:CD84E6FD-54CF-4FC7-8DC4-993C8E5C3062
HistoryOct 11, 2019 - 12:00 a.m.

ArForms < 4.0 - Unauthenticated Arbitrary File Deletion via Traversal

2019-10-1100:00:00
wpscan.com
8

0.009 Low

EPSS

Percentile

82.5%

“arf_delete_file in arformcontroller.php allows unauthenticated users to delete an arbitrary file by supplying its full pathname” The vendor contacted the WPScan Team stating that the issue had been resolved in version 4.0.

CPENameOperatorVersion
arformslt4.0

0.009 Low

EPSS

Percentile

82.5%

Related for WPVDB-ID:CD84E6FD-54CF-4FC7-8DC4-993C8E5C3062