The Elecronic path traversal flaw (CWE-22) in the Helloprint WordPress plugin allows an attacker to delete any file on the server that the web application can access. This leads to loss of critical data, disruption of site operations, and potential compromise of sensitive information stored on the server.

The vulnerability affects the Helloprint plugin for WordPress, specifically all installed versions from the initial release through version 2.0.7. No specific build or platform constraints are listed, so any WordPress site running the plugin within this version range is potentially impacted.

The CVSS score of 8.6 indicates a high severity. The EPSS score of less than 1% suggests that the likelihood of exploitation is very low as of this analysis, and the issue is not listed in the CISA KEV catalog. Based on the description, the likely attack vector involves exploitation of the plugin’s file deletion functionality, which may require authenticated access or direct interaction with the plugin's control interface. Once executed, an attacker can delete arbitrary files, undermining availability and integrity of the affected WordPress installation.