Vendor/product archive

themeum / droip CVEs

Beta · best-effort

4 CVEs tagged to themeum / droip — 1 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to themeum vendor archive

CVE-2025-5835

Published Jul 25, 2025

The Droip plugin for WordPress is vulnerable to unauthorized modification and access of data due to a missing capability check on the droip_post_apis() function in all versions up…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2025-5831

Published Jul 25, 2025

The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_google_font_offline() function in all versions up to, and ex…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2024-43955

Published Aug 29, 2024

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themeum Droip allows File Manipulation.This issue affects Droip: from n/a through 1…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-43954

Published Aug 29, 2024

Incorrect Authorization vulnerability in Themeum Droip allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Droip: from n/a through 1.1.1.

CVSS 6.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1