CyberSecBulletin

Droip vulnerabilities

We track 2 vulnerabilities in Droip products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 25, 2025.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest Droip vulnerabilities

  • 8.8 High severity

    Droip: Missing Authorization

    CVE-2025-5835Droip

    The Droip plugin for WordPress is vulnerable to unauthorized modification and access of data due to a missing capability check on the droip_post_apis() function in all versions up to, and including, 2.2.6. This makes it possible for authenticated attackers, wi

  • 8.8 High severity

    Droip: Unrestricted Upload of File with Dangerous Type

    CVE-2025-5831Droip

    The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_google_font_offline() function in all versions up to, and excluding, 2.5.2. This makes it possible for authenticated attackers, with Subscrib