Cpe:2.3:a:userswp:userswp:*:*:*:*:*:*:*:*

The UsersWP plugin for WordPress versions up to 1.2.70 allows authenticated attackers to delete arbitrary files on the web server via a path traversal vulnerability in the upload_file_remove() AJAX handler.