{"uuid": "452e3443-9505-4612-acd3-eb7897fb6431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-12895", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_arbitrary_file_deletion.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"php\", \"author\": [\"Slavco Mihajloski\", \"Karim El Ouerghemmi\", \"Alo\\u00efs Th\\u00e9venot\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"An arbitrary file deletion vulnerability in the WordPress core allows any user with privileges of an\\n          Author to completely take over the WordPress site and to execute arbitrary code on the server.\", \"disclosure_date\": \"2018-06-26\", \"fullname\": \"auxiliary/scanner/http/wp_arbitrary_file_deletion\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Wordpress Arbitrary File Deletion\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/wp_arbitrary_file_deletion.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/wp_arbitrary_file_deletion\", \"references\": [\"CVE-2018-12895\", \"WPVDB-9100\", \"EDB-44949\", \"PACKETSTORM-148333\", \"URL-https://blog.sonarsource.com/wordpress-file-delete-to-code-execution/\", \"URL-https://blog.vulnspy.com/2018/06/27/Wordpress-4-9-6-Arbitrary-File-Delection-Vulnerbility-Exploit/\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:56.411261Z"}