HaruTheme

Products

ProductCVEsExploitedLatest
Drag and Drop Multiple File Upload (Pro) - WooCommerce1–Jun 27, 2025
Frames1–Sep 26, 2025
WooCommerce Designer Pro1–Sep 26, 2025

Exploited and recent CVEs

  • CVE-2025-60219 Critical 10.0 WordPress WooCommerce Designer Pro Plugin <= 1.9.24 - Arbitrary File Upload Vulnerability 0.4%
  • CVE-2025-60165 Medium 4.3 WordPress Frames Theme <= 1.5.7 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-49885 Critical 10.0 WordPress Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin <= 5.0.6 - Arbitrary File Upload Vulnerability 0.4%