WordPress Plugin Vulnerabilities

Somatic Framework <= 1.8.14 - Subscriber+ Arbitrary File Deletion

Description

The plugin does not perform an authorization check or validate a user-supplied file path before deleting it, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a full site takeover.

Proof of Concept

Affects Plugins

Plugin icon
somatic-framework
No known fix

References

CVE
CVE-2026-115735

Classification

Type
FILE DELETION
OWASP top 10
A6: Security Misconfiguration
CWE
CWE-73
CVSS
9.6 (critical)

Miscellaneous

Verified
Yes
WPVDB ID
0a43de6d-7b65-4cc6-b02a-479bb79293cc

Timeline

Publicly Published
2026-11-09 (about 2 days ago)
Added
2026-11-09 (about 1 day ago)
Last Updated
2026-11-09 (about 1 day ago)

Other

Published
Title
Published
2026-09-29
Title
Cache Enabler < 1.8.17 - Unauthenticated Arbitrary File and Directory Deletion via cache_enabler_clear_page_cache_by_url
Published
2022-08-03
Title
Download Manager < 3.2.51 - Contributor+ Arbitrary File Deletion
Published
2025-12-11
Title
WP User Manager < 2.9.13 - Authenticated (Subscriber+) Arbitrary File Deletion via 'current_user_avatar' Parameter
Published
2025-12-02
Title
Modula 2.13.1 - 2.13.2 - Author+ Arbitrary File Deletion
Published
2024-11-11
Title
Multiple Page Generator Plugin – MPG < 4.0.3 - Authenticated (Editor+) Directory Traversal to Limited File Deletion