Easy Dragdrop File Uploader
An issue exists where the plugin fails to validate a user-supplied path before performing a deletion operation. This allows unauthenticated users to delete arbitrary files and directories on the server, including critical files such as `wp-config.php`.