| Package | Affected versions | Patched versions |
|---|---|---|
| arforms | = 3.7.1 |
In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free