CVE 9.1 CRITICAL

FormGent < 1.0.4 - Unauthenticated Arbitrary File Deletion_CVE-2025-10916

9.1 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Description

The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.

AI Analysis

Unauthenticated arbitrary file deletion vulnerability in FormGent WordPress plugin due to insufficient file path validation

Basic Information

ID CVE-2025-10916
Source WPScan
Published Oct 21, 2025 at 06:00
Modified Oct 21, 2025 at 14:08

Affected Product

Vendor Unknown
Product FormGent
Affected Versions Unknown FormGent 0

CWE Classification

AI Assessment

AI Score 9.1 / 10
AI Severity Critical
Vendor Unknown
Product FormGent
Version < 1.0.4

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.