CVE-2026-115735 | BDVDB-2026-404775 Detail
Somatic Framework
Description#
The Somatic Framework WordPress plugin through 1.8.14 does not perform an authorization check or validate a user-supplied file path before deleting it, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a full site takeover.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-73 External Control of File Name or Path
References#
Exploit#
History#
- Version 1Record published in the CVE List.