CPE
The Somatic Framework WordPress plugin through 1.8.14 is vulnerable to arbitrary file deletion by authenticated users due to a lack of authorization and path validation.