nazsabuz

Products

ProductCVEsExploitedLatest
WP Dropzone2–Dec 12, 2025

Exploited and recent CVEs

  • CVE-2025-13989 Medium 6.4 WP Dropzone <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'callback' Shortcode Attribute 0.3%
  • CVE-2025-12775 High 8.8 WP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload 0.7%