← CVE Intelligence

CVE-2021-25021

OMGF < 4.5.12 - Admin+ Arbitrary Folder Deletion via Path Traversal PUBLISHED

Description (CNA)

The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin

Affected (CNA)

Vendor / productVersions
Unknown / OMGF | Host Google Fonts Locallyaffected 4.5.12 before 4.5.12

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.