CVE-2025-68862
WordPress Woo File Dropzone plugin <= 1.1.7 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Murtaza Bhurgri Woo File Dropzone woo-file-dropzone allows Path Traversal.This issue affects Woo File Dropzone: from n/a through <= 1.1.7.
CVSS 3.1 · 7.7 High
EPSS < 1%
KEV · Not listed
Vendors
Products