Skip to content
OpenAdvisories
High · 7.7 CVE-2025-68862 EUVD-2025-207931GHSA-f8c9-f59w-g5cx

WordPress Woo File Dropzone plugin <= 1.1.7 - Arbitrary File Deletion vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Murtaza Bhurgri Product: Woo File Dropzone

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Murtaza Bhurgri Woo File Dropzone woo-file-dropzone allows Path Traversal.This issue affects Woo File Dropzone: from n/a through <= 1.1.7.

Affected products

VendorProductAffectedFixed
Murtaza Bhurgri Woo File Dropzone ≤ 1.1.7 —

References