CVE-2022-45377: Codedropz Drag And Drop Multiple File Upload For Woocommerce

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8.

Affected products

• Codedropz Drag And Drop Multiple File Upload For Woocommerce: before 1.0.9 (fixed in 1.0.9)

Published 2023-12-21. Last modified 2026-06-17.