Skip to content
OpenAdvisories

Vendor

Droip

2 known vulnerabilities.

Products

Droip 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-5835

    Droip <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Many Actions

    The Droip plugin for WordPress is vulnerable to unauthorized modification and access of data due to a missing capability check on the droip_post_apis() function in all versions up to, and including, 2.2.6. This makes it possible for authenticated attackers, w…

    Droip Droip Web / CMS
  • High 8.8
    CVE-2025-5831

    Droip < 2.5.2 - Authenticated (Subscriber+) Arbitrary File Upload

    The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_google_font_offline() function in all versions up to, and excluding, 2.5.2. This makes it possible for authenticated attackers, with Subscri…

    Droip Droip Web / CMS