CVE-2026-124822

UNKNOWN 0.0

Easy DragDrop File Uploader < 1.1.10 - Unauthenticated Arbitrary File Deletion via Path Traversal

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Easy DragDrop File Uploader WordPress plugin before 1.1.10 does not validate a user-supplied path before deleting it, allowing unauthenticated users to delete arbitrary files and directories on the server, such as wp-config.php.

Vendor	unknown
Product	easy dragdrop file uploader
Published	Nov 13, 2026

Stay Ahead of the Next One

Get instant alerts for unknown easy dragdrop file uploader

Be the first to know when new unknown vulnerabilities affecting unknown easy dragdrop file uploader are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Easy DragDrop File Uploader

0 < 1.1.10

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/2c3537df-1312-442a-816d-904285c0e9c1/

Credits

Quantum WPScan