Threats tagged 'ghsa-fvcv-68w6-wmw6'

The Easy DragDrop File Uploader WordPress plugin versions before 1.1.10 contain a vulnerability where the plugin does not validate user-supplied paths before deleting files. This flaw allows unauthenticated users to delete arbitrary files and directories on the server, including critical files like wp-config.php.