Skip to content
Threat Feed
Subscribe

Product

WP Foodbakery <= 4.9

1 brief RSS
high advisory

WP Foodbakery Plugin Arbitrary File Deletion Vulnerability

The WP Foodbakery plugin for WordPress, specifically versions up to and including 4.9, is vulnerable to arbitrary file deletion (CVE-2026-15802) due to insufficient file path validation, allowing authenticated attackers with subscriber-level access to delete critical server files, potentially leading to remote code execution.

WP Foodbakery <= 4.9 wordpress plugin arbitrary-file-deletion rce cve
1r 2t 1c