Beveiligingsadvies

CVE-2026-12979

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-16 06:00:05

Laatst bijgewerkt 2026-07-16 12:40:57

Toegewezen door WPScan

CVSS-score 5.5

Status PUBLISHED

Beschrijving

The FunnelKit WordPress plugin before 3.15.0.6 does not validate a user-supplied path before deleting a file during a template-import operation, allowing users with administrator privileges to delete arbitrary .json files outside the intended directory through path traversal, which can disable other FunnelKit WordPress plugin before 3.15.0.6 or (denial of service).

← Alle CVE's bekijken Bekijk op cve.org ↗