Lucene search

Drag And Drop Multiple File Upload For Woocommerce Security Vulnerabilities

cve

CVE-2022-45377

Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8.

9.8CVSS

9.4AI Score

0.001EPSS

2023-12-21 01:15 PM

cve

CVE-2023-4821

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts.

5.4CVSS

5.7AI Score

0.001EPSS

2023-10-16 08:15 PM