Skip to content
OpenAdvisories

Vendor

nazsabuz

2 known vulnerabilities.

Products

WP Dropzone 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-12775

    WP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload

    The WP Dropzone plugin for WordPress is vulnerable to authenticated arbitrary file upload in all versions up to, and including, 1.1.0 via the `ajax_upload_handle` function. This is due to the chunked upload functionality writing files directly to the uploads …

    nazsabuz WP Dropzone Web / CMS