Skip to content
OpenAdvisories

Vendor

CodeDropz

1 known vulnerabilities.

Products

Drag and Drop Multiple File Upload (Pro) - WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-5746

    Drag and Drop Multiple File Upload (Pro) - WooCommerce <= 1.7.1 and 5.0 - 5.0.5 - Unauthenticated Arbitrary File Upload

    The Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dnd_upload_cf7_upload_chunks() function in version 5.0 - 5.0.5 (when bundled with the PrintSpace…

    CodeDropz Drag and Drop Multiple File Upload (Pro) - WooCommerce Web / CMS