https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T23:25:20.298635+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-115735 CVE-2026-115735 — Somatic Framework <= 1.8.14 - Subscriber+ Arbitrary File Deletion 2026-11-15T23:25:20.299543+00:00

Affected: Unknown Somatic Framework

The Somatic Framework WordPress plugin through 1.8.14 does not perform an authorization check or validate a user-supplied file path before deleting it, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a full site takeover.