The plugin called “Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)” for WordPress has a security vulnerability. This means that anyone, even without permission, can delete media files through the plugin. This is because the plugin does not check for proper permission before deleting files. This could allow attackers to delete any media files they want.