Zendrop – Global Dropshipping vulnerabilities

2 known vulnerabilities in Zendrop – Global Dropshipping from Zendrop. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Zendrop – Global Dropshipping: Unrestricted Upload of File with Dangerous Type

  CVE-2023-25970Dec 20, 2023Zendrop

  Unrestricted Upload of File with Dangerous Type vulnerability in Zendrop Zendrop – Global Dropshipping.This issue affects Zendrop – Global Dropshipping: from n/a through 1.0.0.

• 9.8 Critical severity

  Zendrop – Global Dropshipping: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-25960Nov 3, 2023Zendrop

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zendrop Zendrop – Global Dropshipping zendrop-dropshipping-and-fulfillment allows SQL Injection.This issue affects Zendrop – Global Dropshipping: from n/a thr