Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-13
Easy DragDrop File Uploader - Security Vulnerability (CVE-2026-124822)
The Easy DragDrop File Uploader WordPress plugin before 1.1.10 does not validate a user-supplied path before deleting it, allowing unauthenticated users to delete arbitrary files and directories on the server, such as wp-config.php.
PLUGIN
Easy DragDrop File Uploader
CVE-2026-124822
Risk Score