File Deletion Vulnerability in Pay with a Tweet WordPress Plugin
CVE-2026-115734
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 11 November 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-115734?
The Pay with a Tweet WordPress plugin version 1.0.5 is susceptible to a file deletion vulnerability due to inadequate file path validation and insufficient access control on admin screens. This flaw allows users with minimum roles, such as Subscribers, to delete arbitrary files on the server. Such access can lead to significant security breaches, enabling potential complete compromise of the website.
Affected Version(s)
Pay with a tweet 0 <= 1.0.5
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.