tombgtn

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

tombgtn records in CISA KEV

No tombgtn vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-12240 CVE-2026-14487 · GHSA-4x73-r52r-6j65

Simple Coherent Form <= 2.4.13 - Unauthenticated Arbitrary File Deletion via 'id' Parameter

MEDIUM 48

The Simple Coherent Form plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the removeUploadDir function in all versions up to, and including, 2.4.13.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01166 Published 2026-07-08 No fix listed CWE-22

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0