high7.5Public exploit code
CVE-2019-16902
In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin ARforms 3.7.1 - Arbitrary File Deletion2019-09-30 · webapps · php
Impact
In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Reputeinfosystems | Arforms | Version 3.7.1 |