Skip to content
OpenAdvisories

Vendor

artkrylov

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    Icons Factory <= 1.6.12 - Missing Authorization to Unauthenticated Arbitrary File Deletion via delete_files() Function

    The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient authorization and improper path validation within the delete_files() function in all versions up to, and including, 1.6.12. This makes it possible for unauthen…