[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5vEB8Cr0UyC3c5Oi-lCGRQGa8dznuUWPal4nQgo3L78":3},{"id":4,"url_slug":5,"title":6,"description":7,"plugin_slug":8,"theme_slug":9,"affected_versions":10,"patched_in_version":11,"severity":12,"cvss_score":13,"cvss_vector":14,"vuln_type":15,"published_date":16,"updated_date":17,"references":18,"days_to_patch":20},"CVE-2023-51418","jvm-rich-text-icons-directory-traversal-to-authenticatedsubscriber-arbitrary-file-deletion","JVM rich text icons \u003C= 1.2.6 - Directory Traversal to Authenticated(Subscriber+) Arbitrary File Deletion","The JVM Gutenberg Rich Text Icons plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.6 via the 'file' parameter. This makes it possible for authenticated attackers, with subscriber access and above, to delete arbitrary files.","jvm-rich-text-icons",null,"\u003C=1.2.6","1.2.7","high",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","2023-12-27 00:00:00","2024-01-22 19:56:02",[19],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fa3e54f9b-db12-42ef-a0fa-2d40c0f7908c?source=api-prod",27]