Listdom <= 6.1.2 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'ix[file]' Parameter
The Listdom plugin for WordPress through version 6.1.2 allows authenticated administrators to delete arbitrary files on the server via path traversal in the 'ix[file]' parameter, potentially leading to remote code execution.