CVE-2026-1883 | wickedplugins Wicked Folders Plugin up to 4.1.0 on WordPress delete_folders authorization

A vulnerability marked as critical has been reported in wickedplugins Wicked Folders Plugin up to 4.1.0 on WordPress. Impacted is the function delete_folders. This manipulation causes authorization bypass.

This vulnerability appears as CVE-2026-1883. The attack may be initiated remotely. There is no available exploit.