title: WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities
description: Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8.
problem types: CWE-434 Unrestricted Upload of File with Dangerous Type
affected:
{
collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: drag-and-drop-multiple-file-upload-for-woocommerce
product: Drag and Drop Multiple File Upload for WooCommerce
vendor: Glen Don L. Mongaya
versions:
changes: [at: 1.0.9, status: unaffected], lessThanOrEqual: 1.0.8, status: affected, version: n/a, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Update to 1.0.9 or a higher version.