high8.1
CVE-2026-48906
The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.
Impact
The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tassos | Advanced Custom Fields | from 1.0.0 through 2.8.12 from 3.0.0 through 3.1.3 |
| Tassos | Convert Forms | from 1.0.0 through 4.4.12 from 5.0.0 through 5.1.5 |
| Tassos | Engagebox | from 1.0.0 through 6.3.11 from 7.0.0 through 7.1.1 |
| Tassos | Google Structured Data | from 1.0.0 through 5.6.11 from 6.0.0 through 6.1.9 |
| Tassos | Mailchimp Auto-Subscribe | from 1.0.0 through 5.0.5 from 5.1.0 through 5.2.0 |
| Tassos | Smile Pack | from 1.0.0 through 1.2.6 from 2.0.0 through 2.1.0 |
| Tassos | Tassos Code Snippets | Version 1.0.0 |
| Tassos | Tassos Framework | from 1.0.0 through 6.0.1 |