Threats tagged 'ghsa-cjxx-cx63-pfpq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.5%	CVE-2026-16054Drag and Drop Multiple File Upload for WooCommerce (WordPress plugin) · External Control of File Name or Path Critical9.1EPSS 0.5%2026-08-06CVE Database V5CVE-2026-16054 CVE-2026-16054 is a critical vulnerability in the Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before version 1.1.8. It allows unauthenticated users to obtain a valid nonce, which is the only control for the file-deletion routine. This flaw enables anonymous attackers to delete files staged in the upload directory, causing irreversible destruction of customers' pending order attachments. EPSS 0.5%Vulnerability CWE-73 #ghsa-cjxx-cx63-pfpq	CVE Database V5	2026-08-06

Page 1 of 1