Vulnerability Details CVE-2019-16902
In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.147
EPSS Ranking 94.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 6.4
References
Products affected by CVE-2019-16902
-
cpe:2.3:a:reputeinfosystems:arforms:3.7.1