Arbitrary File Deletion Vulnerability in Data Tables Generator by Supsystic for WordPress

CVE-2025-12089

What is CVE-2025-12089?

The Data Tables Generator by Supsystic plugin for WordPress has a significant security flaw that stems from inadequate file path validation in its cleanCache() function. This vulnerability allows authenticated attackers with Administrator-level access or higher to delete arbitrary files on the server. Such actions can compromise server integrity, potentially leading to remote code execution if critical files, such as wp-config.php, are targeted.

References