Advisories · Technology

Drag and Drop Multiple File Upload for WooCommerce.

Every CVE that names Drag and Drop Multiple File Upload for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-16054 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Drag and Drop Multiple File Upload for WooCommerce < 1.1.8 - Unauthenticated File Deletion via Nonce Oracle
- Drag and Drop Multiple File Upload for WooCommerce
- Path traversal
Not analysed yet 6 Aug 2026
CVE-2023-4821 CVE record

CVSS 5.4 Medium

Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting
- Drag and Drop Multiple File Upload for WooCommerce
Not analysed yet 16 Oct 2023