Mulika vulnerabilities
We track 2 vulnerabilities in Mulika products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Mulika vulnerabilities
- 9.8 Critical severity
MIPL Grouped Checkout Fields for WooCommerce…: Unrestricted Upload of File with Dangerous Type
The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the `mipl_wc_upload_file` function in all versions up to, and including
- 7.5 High severity
MIPL Multistore Sync for WooCommerce. Sync…: Improper Limitation of a Pathname to a Restricted Directory
The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.5 via the 'mipl_wc_sync_download_log' action. This makes it possible for unauthenticated attackers to read the contents of arbitrary