Approved changes feed: RSS · Atom

cpe:2.3:a:harutheme:drag_and_drop_multiple_file_upload_(pro)_-_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHarutheme (8c60a5b7-7e53-5796-b0ec-e89e9261bbac)
ProductDrag And Drop Multiple File Upload (Pro) Woocommerce (0ad07e4c-2e62-5afb-a912-3a7fd3e9c7c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49885 vulnerable 2026-06-08 07:29:15.052477 WordPress Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin <= 5.0.6 - Arbitrary File Upload Vulnerability
CRITICAL (10)
Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme Drag and Drop Multiple File Upload (Pro) - WooCommerce drag-and-drop-file-upload-wc-pro allows Upload a Web Shell to a Web Server.This issue affects Drag and Drop Multiple File Upload (Pro) - WooCommerce: from n/a through <= 5.0.6.
Published: 2025-06-27T11:52:30.847Z
Updated: 2026-05-12T00:26:42.811Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.