Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows…

A path traversal vulnerability (CVE-2026-42757) affects the WebinarIgnition WordPress plugin developed by Saleswonder Team. The vulnerability allows improper limitation of pathname to restricted directories, enabling path traversal attacks. All versions from an unspecified starting point through version 4.08.253 are affected. The issue has been documented by both NVD and Patchstack, with the latter specifically identifying it as an arbitrary file deletion vulnerability. Users should upgrade to version 4.08.253 or later to remediate this security issue.