CVE-2026-124822

The Easy DragDrop File Uploader WordPress plugin (versions before 1.1.10 ) is vulnerable to unauthenticated arbitrary file deletion due to a lack of validation on user-supplied paths. An attacker can exploit this path traversal flaw to delete arbitrary files or directories on the server, includin...