Somatic Framework vulnerabilities
We track 1 vulnerability in Somatic Framework products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest Somatic Framework vulnerabilities
- 9.6 Critical severity
Somatic Framework: External Control of File Name or Path
The Somatic Framework WordPress plugin through 1.8.14 does not perform an authorization check or validate a user-supplied file path before deleting it, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can le