Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: artkrylov Clear all filters
TI-2025-07103 CVE-2025-7778 · GHSA-7m8m-65vx-9r5x

Icons Factory <= 1.6.12 - Missing Authorization to Unauthenticated Arbitrary File Deletion via delete_files() Function

Priority MEDIUM 50

The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient authorization and improper path validation within the delete_files() function in all versions up to, and including, 1.6.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00757 Published 2025-08-15 No fix listed CWE-285