{"id":"CVE-2026-107594","published":"2026-10-14T07:17:02.090","lastModified":"2026-10-14T16:14:02.800","description":"The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated users, allowing them to delete arbitrary files on the server, including files whose removal leads to full site compromise.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H","cwes":["CWE-73"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/bcd5538b-0ad4-4311-b3b6-3fb89d4caa76/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The WordPress plugin allows unauthenticated users to delete arbitrary files on the server by manipulating session data that controls file paths. This can lead to complete site compromise when critical files are removed.","exploitability":"Exploitation is straightforward requiring no authentication and only needs a way to set session data, with the main precondition being that the vulnerable plugin is installed and active.","blast_radius":"The impact could be severe as attackers can delete core WordPress files, plugins, or configuration files, potentially leading to complete site takeover or data loss.","remediation":"Upgrade to version 1.1.4 or later to fix the file path validation vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["file-delete","wp-plugin","unauth","rce"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:46:06.127Z"}}