Логотип exploitDog
bind:CVE-2019-16902
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-16902

Количество 2

Количество 2

nvd логотип

CVE-2019-16902

больше 6 лет назад

In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.

CVSS3: 7.5
EPSS: Средний
github логотип

GHSA-wmr8-fmmf-mpmw

больше 3 лет назад

In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.

EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2019-16902

In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.

CVSS3: 7.5
15%
Средний
больше 6 лет назад
github логотип
GHSA-wmr8-fmmf-mpmw

In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.

15%
Средний
больше 3 лет назад

Уязвимостей на страницу