CVE-2026-12513

The record

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend file submission and their single-pass traversal filter is bypassable, allowing unauthenticated users to store a path that points outside the uploads directory. When the corresponding file entry is later permanently deleted, an arbitrary file on the server (such as wp-config.php) is deleted, leading to denial of service and potential site takeover.

Affected packages

Related vulnerabilities

• CVE-2026-88899 knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request… CWE-73
• CVE-2026-53956 Rattler is a library that provides common functionality used within the conda ecosystem. CWE-73
• CVE-2026-79692 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-73
• CVE-2026-86995 n8n is an open source workflow automation platform. CWE-73
• CVE-2026-62804 External control of file name or path in Microsoft Office Word allows an unauthorized… CWE-73
• CVE-2026-81830 The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local… CWE-73
• CVE-2026-79426 An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component… CWE-73
• CVE-2026-80119 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-73