CVE-2025-10916CRITICAL 9.1EPSS p24.1%

CVE-2025-10916CVE-2025-10916

Description

The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.

Scoring

CVSS 3.19.1 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS0.32% probability of exploitation · percentile 24.1% · 2026-08-03T12:00:16Z
Published2025-10-21
Last modified2026-04-15

References

  1. https://wpscan.com/vulnerability/81c23998-1abb-495f-890a-79624a4cab9a/
  2. https://wpscan.com/vulnerability/81c23998-1abb-495f-890a-79624a4cab9a/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-14344
CVE
CVE-2025-6463
CVE
CVE-2025-6691
CVE
CVE-2026-1056
CVE
CVE-2026-3666
CVE
CVE-2025-8141
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.