The MPG plugin for WordPress, known as the Multiple Page Generator Plugin, has a security issue. It does not properly check the file paths, which can allow someone with editor-level access or higher to delete certain files on the server. This vulnerability exists in all versions up to and including 4.0.2.