Drag and Drop Multiple File Upload for WooCommerce vulnerabilities
We track 1 vulnerability in Drag and Drop Multiple File Upload for WooCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Drag and Drop Multiple File Upload for WooCommerce vulnerabilities
- 9.1 Critical severity
Drag and Drop Multiple File Upload for…: External Control of File Name or Path
The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that is the only control gating its file-deletion routine, allowing anonymous attackers to delete files sta