Data Tables Generator by Supsystic WordPress Plugin Arbitrary File Deletion Vulnerability

A vulnerability allowing arbitrary file deletion has been identified in the Data Tables Generator by Supsystic plugin for WordPress, affecting all versions through 1.10.45. This issue arises from inadequate file path validation in the cleanCache() function, which allows authenticated attackers with Administrator-level access to delete arbitrary files on the server. Exploiting this vulnerability could lead to remote code execution, particularly if a critical file like wp-config.php is deleted.

Impact

Successful exploitation allows authenticated users with Administrator privileges to delete arbitrary files on the server, potentially leading to remote code execution.

Remediation

Users are advised to update the Data Tables Generator by Supsystic plugin to version 1.10.46 or a newer patched version.