nazsabuz
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Dropzone | 2 | – | Dec 12, 2025 |
Exploited and recent CVEs
- CVE-2025-13989 WP Dropzone <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'callback' Shortcode Attribute 0.3%
- CVE-2025-12775 WP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload 0.7%