WordPress SigmaForms Pro File Deletion Bug

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion.

An unauthenticated attacker can delete arbitrary files on the server by exploiting insufficient file path validation in the delete_submission_files function in versions up to and including 1.4.11.

This vulnerability can lead to remote code execution if a critical file like wp-config.php is deleted.