CVE Catalog
CVE-2026-59555
CriticalCVSS 10.0Summary
The Participants Database plugin versions up to 2.7.8.3 allow unauthenticated arbitrary file deletion.
Risk Assessment
An unauthenticated attacker can delete critical system files, potentially leading to site downtime or data loss.
Recommendation
It is recommended to update the Participants Database plugin to a version later than 2.7.8.3.
Original NVD description (English source)
Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions.