Skip to content

Nazsabuz Wp Dropzone vulnerabilities

nazsabuz wp dropzoneWP Dropzone <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'callback' Shortcode AttributeCVE-2025-139896.4 MediumDecember 12, 2025
nazsabuz wp dropzoneWP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-127758.8 HighNovember 18, 2025