TI-2025-07038 CVE-2025-7712 · GHSA-cfmf-rfqg-w6rc
Madara - Core <= 2.2.3 - Unauthenticated Arbitrary File Deletion
Priority MEDIUM 49
The Madara - Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wp_manga_delete_zip() function in all versions up to, and including, 2.2.3.