{"id":"CVE-2022-45377","aliases":["EUVD-2022-48274","GHSA-7pcg-c7pp-5c42"],"status":"published","title":"WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin \u003c= 1.0.8 is vulnerable to Multiple Vulnerabilities","description":"Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00599,"percentile":0.48936,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434"],"published":"2023-12-21T13:06:33Z","modified":"2026-06-17T05:09:54Z","products":[{"vendor":"codedropz","product":"drag_and_drop_multiple_file_upload_for_woocommerce"},{"vendor":"glen don l. mongaya","product":"drag and drop multiple file upload for woocommerce"},{"vendor":"glenwpcoder","product":"drag and drop multiple file upload for woocommerce"}],"references":[{"url":"https://patchstack.com/database/vulnerability/drag-and-drop-multiple-file-upload-for-woocommerce/wordpress-drag-and-drop-multiple-file-upload-for-woocommerce-plugin-1-0-8-multiple-vulnerabilities?_s_id=cve","tags":["vdb-entry","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45377"},{"url":"https://github.com/advisories/GHSA-7pcg-c7pp-5c42"}],"sources":{"cve":[{"id":"CVE-2022-45377","title":"WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin \u003c= 1.0.8 is vulnerable to Multiple Vulnerabilities","description":"Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8.","status":"published","published":"2023-12-21T13:06:33.431Z","modified":"2026-04-28T16:07:52.733Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:34:31.519788Z"}],"euvd":[{"id":"EUVD-2022-48274","description":"Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8.","status":"published","published":"2023-12-21T13:06:33Z","modified":"2026-04-28T16:07:52Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:24:13.885346Z"}],"ghsa":[{"id":"GHSA-7pcg-c7pp-5c42","title":"Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and...","description":"Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8.","status":"published","published":"2023-12-21T15:30:32Z","modified":"2026-04-28T21:34:35Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T15:07:45.281583Z"}],"nvd":[{"id":"CVE-2022-45377","description":"Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8.","status":"published","published":"2023-12-21T13:15:08.33Z","modified":"2026-06-17T05:09:54.89Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:07:39.811118Z"}]}}