Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
ThemeumDroip

4 matches found

CVE
CVE•added 2024/08/29 3:19 p.m.•65 views

CVE-2024-43955

CVE-2024-43955: Droip (WordPress plugin)

10CVSS5.2AI score0.00604EPSS
CVE
CVE•added 2024/08/29 3:18 p.m.•55 views

CVE-2024-43954

CVE-2024-43954 corresponds to a Themeum Droip vulnerability in WordPress. Connected sources show an ACL/authorization bypass for Droip allowing access to constrained functionality, affecting Droip versions up to 1.1.1. The Wordfence data explicitly references an Unauthenticated Arbitrary File Del...

6.3CVSS5.8AI score0.00284EPSS
CVE
CVE•added 2025/07/25 6:43 a.m.•37 views

CVE-2025-5831

CVE-2025-5831 affects the Droip WordPress plugin. The vulnerability arises from missing file type validation in the make_google_font_offline() function, allowing authenticated users with Subscriber+ privileges to upload arbitrary files to the server (versions up to 2.2.0). This can potentially le...

8.8CVSS6.6AI score0.00628EPSS
CVE
CVE•added 2025/07/25 6:43 a.m.•32 views

CVE-2025-5835

CVE-2025-5835 concerns the Droip plugin for WordPress. The vulnerability arises from a missing capability check in the droip_post_apis() function across versions up to and including 2.2.0, enabling authenticated attackers with Subscriber-level access and above to trigger AJAX hooks and perform ac...

8.8CVSS6AI score0.00353EPSS