Unrated severityNVD Advisory· Published Nov 11, 2026
CVE-2026-115734
CVE-2026-115734
Description
The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it restrict access to the relevant administration screens, allowing users with a role as low as Subscriber to delete arbitrary files on the server, which can lead to a full site compromise.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.0.5
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.