WordPress security by component
Drag and Drop Multiple File Upload for WooCommerce
Plugin description
Drag and Drop Multiple File Upload for WooCommerce is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published May 09, 2025; the highest CVE/CNA score is 9.8.
Plugin slug:
drag-and-drop-multiple-file-upload-for-woocommerceLatest vulnerability
CVE-2025-4403: Drag and Drop Multiple File Upload for WooCommerce: Dangerous file upload
Drag and Drop Multiple File Upload for WooCommerce is affected by dangerous file upload. The vulnerable path is reachable without authentication. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
| Safe version |
|
||
|---|---|---|---|
| May 09, 2025 |
CVE-2025-4403
Drag and Drop Multiple File Upload for WooCommerce: Dangerous file upload
Drag and Drop Multiple File Upload for WooCommerce is affected by dangerous file upload. The vulnerable path is reachable without authentication. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Apr 05, 2025 |
CVE-2025-2941
Drag and Drop Multiple File Upload for WooCommerce: Code execution
Drag and Drop Multiple File Upload for WooCommerce is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Dec 21, 2023 |
CVE-2022-45377
Drag and Drop Multiple File Upload for WooCommerce: Dangerous file upload
Drag and Drop Multiple File Upload for WooCommerce is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE6.5
NVD9.8
|