CVE-2021-41975: Tadtools Project Tadtools

Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days.

TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in.

Affected products

• Tadtools Project Tadtools: before 3.2.2 (fixed in 3.2.2)

Published 2021-10-08. Last modified 2026-06-17.