CODE MONKEYS PROPOSALS – Easily create client proposals from your WordPress admin dashboard <= 1.0.1 - Authenticated (Subscriber+) Arbitrary File Deletion
highThe CODE MONKEYS PROPOSALS – Easily create client proposals from your WordPress admin dashboard plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient file path validation in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with subscriber-level ac...
- CVSS:
- 8.1 (Wordfence)
- Affected:
- up to 1.0.1
- Fix:
- No patched version reported
- Disclosed:
- Sep 10, 2026