Medium · 6.5 CVE-2022-45377 EUVD-2022-48274GHSA-7pcg-c7pp-5c42

WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities

Published Dec 21, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Glen Don L. Mongaya Product: Drag and Drop Multiple File Upload for WooCommerce Category: Web / CMS

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8.

Affected products

Vendor	Product	Affected	Fixed
Glen Don L. Mongaya	Drag and Drop Multiple File Upload for WooCommerce	≤ 1.0.8	—

References

https://patchstack.com/database/vulnerability/drag-and-drop-multiple-file-upload-for-woocommerce/wordpress-drag-and-drop-multiple-file-upload-for-woocommerce-plugin-1-0-8-multiple-vulnerabilities?_s_id=cve vdb-entry