Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-10916

FormGent < 1.0.4 - Unauthenticated Arbitrary File Deletion

Description

The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown FormGent

Default version status: unaffected

  • 0 to < 1.0.4affected

References