WordPress security by component

WooMulti

Plugin description

WooMulti is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 12, 2025; the highest CVE/CNA score is 7.3.

Plugin slug: woomulti

Latest vulnerability

CVE-2025-12835: WooMulti: Arbitrary file deletion

WooMulti is affected by arbitrary file deletion. Exposure depends on how the affected operation is made reachable by the site. A successful request can remove files outside the intended scope and may make the site unavailable.

PublishedDec 12, 2025

Safe version guidanceSee mitigation notes

		Safe version
Dec 12, 2025	CVE-2025-12835 WooMulti: Arbitrary file deletion WooMulti is affected by arbitrary file deletion. Exposure depends on how the affected operation is made reachable by the site. A successful request can remove files outside the intended scope and may make the site unavailable.	See mitigation notes	CVE7.3 NVDPending