Vulnerability record/PUBLISHED/Published Nov 13, 2026 06:00:09 UTC
CVE-2026-124822
The Easy DragDrop File Uploader WordPress plugin before 1.1.10 does not validate a user-supplied path before deleting it, allowing unauthenticated users to delete arbitrary files and directories on the server, such as wp-config.php.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityWPScan
Last updatedNov 13, 2026 06:00:09 UTC
PublishedNov 13, 2026 06:00:09 UTC
ReservedNov 9, 2026 13:24:25 UTC
Credits
- Quantum
- WPScan