What is the CVSS score of CVE-2025-68862?

CVE-2025-68862 has a CVSS 3.1 base score of 7.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Murtaza Bhurgri Woo File Dropzone are affected by CVE-2025-68862?

A path traversal vulnerability in the Woo File Dropzone WordPress plugin (versions through 1.1.7) could allow attackers to access or manipulate files outside intended directories, potentially…

How to fix or mitigate CVE-2025-68862?

Within 24 hours: Identify all WordPress installations using Woo File Dropzone and document affected versions. Within 7 days: Implement WAF rules to block path traversal patterns in file upload requests, disable the plugin if not business-critical, or restrict upload functionality to authenticated users only with strict file type validation. Within 30 days: Transition to an alternative file upload solution, contact the vendor for patch availability timeline, or apply vendor patch immediately upon release.

Murtaza Bhurgri Woo File Dropzone CVE-2025-68862

HIGH

Path Traversal (CWE-22)

2026-02-20 audit@patchstack.com

Path Traversal

7.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.7 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

CVE Published

Feb 20, 2026 - 16:22 nvd

HIGH 7.7

DescriptionCVE.org

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Murtaza Bhurgri Woo File Dropzone woo-file-dropzone allows Path Traversal.This issue affects Woo File Dropzone: from n/a through <= 1.1.7.

AnalysisAI

Technical ContextAI

Classified as CWE-22 (Path Traversal). Affects Murtaza Bhurgri Woo File Dropzone woo-file-dropzone. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Murtaza Bhurgri Woo File Dropzone woo-file-dropzone allows Path Traversal.This issue affects Woo File Dropzone: from n/a through <= 1.1.7.

Affected ProductsAI

Product: Murtaza Bhurgri Woo File Dropzone woo-file-dropzone.

RemediationAI

Monitor vendor advisories for a patch. Validate and sanitize file path inputs. Use allowlists. Restrict network access to the affected service where possible.