This vulnerability (CVE-2026-32477) affects ShopBuilder Pro – Elementor WooCommerce Builder Addons versions up to 2.2.0. It allows unauthenticated attackers to delete arbitrary files on the affected system, exploiting a path traversal flaw (CWE-22). The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and a scope change with high impact on availability but no impact on confidentiality or integrity. No patch or vendor advisory is currently provided, and no known exploits in the wild have been reported.

Successful exploitation results in arbitrary file deletion without authentication, potentially causing denial of service or disruption of the affected system's functionality. The vulnerability does not impact confidentiality or integrity but severely affects availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to vulnerable endpoints and monitor for suspicious activity related to file deletion attempts.