The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Formgent Plugin | — | Update formgent plugin to version 1.0.4, or a newer patched version | Oct 30, 2025 | Sep 30, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub