🔺Severity: Critical
👽 Reporter: jakubk
⭐️ Reputation: 222
🛠 State: resolved
💼 Team: WordPress
💵 Bounty: null
🕐 Submitted: 2026-08-11
⏰ Disclosed: 2026-08-28 16:39:48
📝 Summary: A vulnerability was discovered in the WordPress media processing functionality. This vulnerability allowed an authenticated author to delete arbitrary files on the server. The vulnerability was caused by insufficient input validation in the
finalize item() function, which allowed an attacker to control the file paths stored in the attachment metadata. This resulted in the wp delete attachment files() function deleting files outside of the expected upload directory. The vulnerability was present in WordPress versions 7.0.2 and trunk revisions up to 7.1-beta3-62852.📂 Report JSON File: 3931777
@hackeronereports