CVE-2023-25970: Zendrop

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in Zendrop Zendrop – Global Dropshipping.This issue affects Zendrop – Global Dropshipping: from n/a through 1.0.0.

Affected products

• Zendrop Zendrop: before 1.0.1 (fixed in 1.0.1)

Published 2023-12-20. Last modified 2026-06-17.