The vulnerability identified as CVE-2025-68862 involves improper limitation of a pathname to a restricted directory in the Woo File Dropzone plugin for WordPress. This path traversal flaw allows an attacker with low privileges to access or influence file paths outside the intended directory scope, leading to potential denial of service conditions. The affected versions are all versions up to and including 1.1.7. The CVSS v3.1 base score is 7.7, indicating a high severity with network attack vector, low attack complexity, requiring low privileges and no user interaction, and impacting availability with a scope change.

The impact of this vulnerability is a high-severity availability disruption (denial of service) due to path traversal. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits in the wild have been reported. The vulnerability requires low privileges and can be exploited remotely over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor for vendor updates and apply any official fixes once released. Until then, restricting access to the plugin and limiting user privileges may reduce exposure.