mulika vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 1.1%	CVE-2026-8778MIPL Grouped Checkout Fields for WooCommerce. Customize & Organize Checkout Fields. (WordPress plugin) · Unrestricted File Upload Critical9.8EPSS 1.1%2026-09-11CVE Database V5CVE-2026-8778 The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the `mipl_wc_upload_file` function in all versions up to, and including, 1.2.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. EPSS 1.1%Vulnerability mulika CWE-434	CVE Database V5	2026-09-11
High	7.5	EPSS 1.1%	CVE-2024-12152MIPL Multistore Sync for WooCommerce. Sync Products, Stock and Orders. (WordPress plugin) · Path Traversal High7.5EPSS 1.1%2025-01-07CVE Database V5CVE-2024-12152 The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.5 via the 'mipl_wc_sync_download_log' action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. EPSS 1.1%Vulnerability mulika CWE-22	CVE Database V5	2025-01-07

Page 1 of 1