Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-12835

WooMulti <= 1.7 - Subscriber+ Arbitrary File Deletion

Description

The WooMulti WordPress plugin through 17 does not validate a file parameter when deleting files, which could allow any authenticated users, such as subscriber to delete arbitrary files on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WooMulti

Default version status: affected

  • 0 to ≤ 1.7affected

References