Easy DragDrop File Uploader vulnerabilities
We track 1 vulnerability in Easy DragDrop File Uploader products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest Easy DragDrop File Uploader vulnerabilities
- 10.0 Critical severity
Easy DragDrop File Uploader: External Control of File Name or Path
The Easy DragDrop File Uploader WordPress plugin before 1.1.10 does not validate a user-supplied path before deleting it, allowing unauthenticated users to delete arbitrary files and directories on the server, such as wp-config.php.