CVE-2026-22448
WordPress PitchPrint plugin <= 11.1.2 - Arbitrary File Deletion vulnerability
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
6th
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in flexcubed PitchPrint pitchprint allows Path Traversal.This issue affects PitchPrint: from n/a through <= 11.1.2.
| CWE | CWE-22 |
| Vendor | flexcubed |
| Product | pitchprint |
| Published | Mar 25, 2026 |
| Last Updated | Mar 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for flexcubed pitchprint
Be the first to know when new high vulnerabilities affecting flexcubed pitchprint are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
flexcubed / PitchPrint
n/a ≤ <= 11.1.2
References
Credits
NumeX | Patchstack Bug Bounty Program