<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>File-Deletion — PoC Archive</title><link>https://poc.intelseclab.com/tags/file-deletion/</link><description>Latest proof-of-concept entries.</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 05 Jul 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://poc.intelseclab.com/tags/file-deletion/index.xml" rel="self" type="application/rss+xml"/><item><title>Snow Monkey Forms — Unauthenticated Arbitrary File Deletion via Path Traversal (CVE-2026-1056)</title><link>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1056-snow-monkey-forms-file-deletion/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1056-snow-monkey-forms-file-deletion/</guid><description>Critical severity — web · CVE-2026-1056. Status: PoC. Affects: Snow Monkey Forms (WordPress plugin). Tags: wordpress, plugin, snow-monkey-forms, path-traversal, file-deletion, unauthenticated, rest-api, csrf-bypass.</description><category>web</category><category>Critical</category><category>wordpress</category><category>plugin</category><category>snow-monkey-forms</category><category>path-traversal</category><category>file-deletion</category><category>unauthenticated</category><category>rest-api</category><category>csrf-bypass</category></item><item><title>Simple File List Plugin Unauthenticated File Modification / Path Traversal — CVE-2026-11912</title><link>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-11912-simple-file-list-path-traversal/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-11912-simple-file-list-path-traversal/</guid><description>High severity (CVSS 7.5) — web · CVE-2026-11912. Status: PoC. Affects: Simple File List WordPress plugin. Tags: wordpress, plugin, path-traversal, missing-authorization, unauthenticated, file-deletion, ajax, nonce.</description><category>web</category><category>High</category><category>wordpress</category><category>plugin</category><category>path-traversal</category><category>missing-authorization</category><category>unauthenticated</category><category>file-deletion</category><category>ajax</category><category>nonce</category></item><item><title>AdminPanel 4.0 CSRF File Deletion / Setup-Mode Reset — CVE-2026-30498</title><link>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30498-adminpanel-csrf/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-30498-adminpanel-csrf/</guid><description>High severity — web · CVE-2026-30498 (reserved by MITRE). Status: PoC. Affects: AdminPanel 4.0 (archived project). Tags: csrf, php, file-deletion, auth-bypass, setup-mode, get-request, adminpanel.</description><category>web</category><category>High</category><category>csrf</category><category>php</category><category>file-deletion</category><category>auth-bypass</category><category>setup-mode</category><category>get-request</category><category>adminpanel</category></item></channel></rss>