Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Nazsabuz
Nazsabuz vulnerabilities
Products
Wp Dropzone
2
Newest
nazsabuz
wp dropzone
WP Dropzone <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'callback' Shortcode Attribute
CVE-2025-13989
6.4
Medium
December 12, 2025
nazsabuz
wp dropzone
WP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2025-12775
8.8
High
November 18, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open