THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-14524 (CRITICAL 9.1) — The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSol_fileDeleteProcess function in all versions up to, and including, 2.0.8. This makes it possible for unauthenticated attackers to delete ar

[NVD] CVE-2026-14524 (CRITICAL 9.1) — The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSol_fileDeleteProcess function in all versions up to, and including, 2.0.8. This makes it possible for unauthenticated attackers to delete ar

mednvdPublished 2026-08-16

CVE-2026-14524 CVSS: 9.1 CRITICAL Published: 2026-08-16T05:16:46.493

The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSol_fileDeleteProcess function in all versions up to, and including, 2.0.8. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead

MITRE ATT&CK techniques

File DeletionT1070.004

Indicators of compromise

CVE-2026-14524cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-14524