Tag
The Checkout Field Manager plugin for WordPress contains an authorization bypass vulnerability allowing low-privileged authenticated users to delete arbitrary files from the Media Library.