HaruTheme vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	10.0	EPSS 0.4%	CVE-2025-60219WooCommerce Designer Pro (WordPress plugin) · Unrestricted File Upload Critical10.0EPSS 0.4%2025-09-26CVE Database V5CVE-2025-60219 Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme WooCommerce Designer Pro wc-designer-pro allows Upload a Web Shell to a Web Server.This issue affects WooCommerce Designer Pro: from n/a through <= 1.9.24. EPSS 0.4%Vulnerability HaruTheme CWE-434	CVE Database V5	2025-09-26
Medium	4.3	EPSS 0.3%	CVE-2025-60165Frames (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2025-09-26CVE Database V5CVE-2025-60165 Missing Authorization vulnerability in HaruTheme Frames frames allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frames: from n/a through <= 1.5.7. EPSS 0.3%Vulnerability HaruTheme	CVE Database V5	2025-09-26
Critical	10.0	EPSS 0.4%	CVE-2025-49885Drag and Drop Multiple File Upload (Pro) (WordPress plugin) · Unrestricted File Upload Critical10.0EPSS 0.4%2025-06-27CVE Database V5CVE-2025-49885 Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme Drag and Drop Multiple File Upload (Pro) - WooCommerce drag-and-drop-file-upload-wc-pro allows Upload a Web Shell to a Web Server.This issue affects Drag and Drop Multiple File Upload (Pro) - WooCommerce: from n/a through <= 5.0.6. EPSS 0.4%Vulnerability HaruTheme	CVE Database V5	2025-06-27

Page 1 of 1