Access violation vulnerability in Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) 2.8.7

The plugin called “Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)” for WordPress has a security vulnerability. This means that anyone, even without permission, can delete media files through the plugin. This is because the plugin does not check for proper permission before deleting files. This could allow attackers to delete any media files they want.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.