Drag and Drop Multiple File Upload for WooCommerce — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in Drag and Drop Multiple File Upload for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID	Title	CVSS	Severity	Published
CVE-2026-16054	Drag and Drop Multiple File Upload for WooCommerce < 1.1.8 - Unauthenticated File Deletion via Nonce Oracle	-	-	2026-08-06
CVE-2025-4403	Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function CWE-434	9.8	Critical	2025-05-09
CVE-2025-2941	Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move CWE-22	9.8	Critical	2025-04-05
CVE-2022-45377	WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities CWE-434	6.5	Medium	2023-12-21
CVE-2023-4821	Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting	9.1	-	2023-10-16

All 5 known CVE vulnerabilities affecting Drag and Drop Multiple File Upload for WooCommerce with full Chinese analysis, references, and POCs where available.