9.1
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Description
The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.
AI Analysis
Unauthenticated arbitrary file deletion vulnerability in FormGent WordPress plugin due to insufficient file path validation
Basic Information
ID
CVE-2025-10916
Source
WPScan
Published
Oct 21, 2025 at 06:00
Modified
Oct 21, 2025 at 14:08
Affected Product
Vendor
Unknown
Product
FormGent
Affected Versions
Unknown FormGent 0
CWE Classification
AI Assessment
AI Score
9.1 / 10
AI Severity
Critical
Vendor
Unknown
Product
FormGent
Version
< 1.0.4