CVE-2019-14206

An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to delete arbitrary files via the $REQUEST['adaptive-images-settings'] parameter in adaptive-images-script.php.

• CWE-22

• https://github.com/markgruffer/markgruffer.github.io/blob/master/_posts/2019-07-19-adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.markdownExploit, Third Party Advisory
• https://markgruffer.github.io/2019/07/19/adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.htmlExploit, Third Party Advisory
• https://wordpress.org/plugins/adaptive-images/#developersRelease Notes
• https://wpvulndb.com/vulnerabilities/9468Third Party Advisory
• https://github.com/markgruffer/markgruffer.github.io/blob/master/_posts/2019-07-19-adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.markdownExploit, Third Party Advisory
• https://markgruffer.github.io/2019/07/19/adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.htmlExploit, Third Party Advisory
• https://wordpress.org/plugins/adaptive-images/#developersRelease Notes
• https://wpvulndb.com/vulnerabilities/9468Third Party Advisory

Published

Jul 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14200An issue was discovered in Das U-Boot through 2019.07. There…
• CVE-2019-14201An issue was discovered in Das U-Boot through 2019.07. There…
• CVE-2019-14202An issue was discovered in Das U-Boot through 2019.07. There…
• CVE-2019-14203An issue was discovered in Das U-Boot through 2019.07. There…
• CVE-2019-14204An issue was discovered in Das U-Boot through 2019.07. There…
• CVE-2019-14205A Local File Inclusion vulnerability in the Nevma Adaptive I…7.5
• CVE-2019-14207An issue was discovered in Foxit PhantomPDF before 8.3.11. T…
• CVE-2019-14208An issue was discovered in Foxit PhantomPDF before 8.3.10. T…
• CVE-2019-14209An issue was discovered in Foxit PhantomPDF before 8.3.10. T…
• CVE-2019-1421Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14210An issue was discovered in Foxit PhantomPDF before 8.3.10. T…
• CVE-2019-14211An issue was discovered in Foxit PhantomPDF before 8.3.11. T…7.5