Skip to content
Threat Feed
Subscribe

Vendor

Perfmatters

1 brief RSS
critical advisory

Perfmatters WordPress Plugin Arbitrary File Deletion Vulnerability (CVE-2026-4350)

The Perfmatters plugin for WordPress versions up to 2.5.9.1 is vulnerable to arbitrary file deletion via path traversal, allowing authenticated attackers with minimal privileges to delete sensitive files.

PoC cve-2026-4350 wordpress perfmatters file-deletion path-traversal
2r 1t 1c updated