Medium severity6.5NVD Advisory· Published Dec 21, 2023· Updated Apr 28, 2026

CVE-2022-45377

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Codedropz/Drag And Drop Multiple File Upload For Woocommerce
cpe:2.3:a:codedropz:drag_and_drop_multiple_file_upload_for_woocommerce:*:*:*:*:*:wordpress:*:*
Range: <1.0.9
WordPress/Drag And Drop Multiple File Upload For Woocommercellm-fuzzy
Range: <=1.0.8
Package: https://wordpress.org/plugins/drag-and-drop-multiple-file-upload-for-woocommerce

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/drag-and-drop-multiple-file-upload-for-woocommerce/wordpress-drag-and-drop-multiple-file-upload-for-woocommerce-plugin-1-0-8-multiple-vulnerabilitiesnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000