Droip
Themeum · 4 CVEs
CVE-2025-5835
HIGH
Droip <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Many Actions
Jul 25, 2025
CVE-2025-5831
HIGH
Droip < 2.5.2 - Authenticated (Subscriber+) Arbitrary File Upload
Jul 25, 2025
CVE-2024-43955
CRITICAL
WordPress Droip plugin <= 1.1.1 - Unauthenticated Arbitrary File Download/Deletion vulnerability
Aug 29, 2024
CVE-2024-43954
MEDIUM
WordPress Droip plugin <= 1.1.1 - Subscriber+ Settings Change/Data Exposure Vulnerability
Aug 29, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-5835 | Droip <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Many Actions | HIGH | 0.36% | Jul 25, 2025 |
| CVE-2025-5831 | Droip < 2.5.2 - Authenticated (Subscriber+) Arbitrary File Upload | HIGH | 0.64% | Jul 25, 2025 |
| CVE-2024-43955 | WordPress Droip plugin <= 1.1.1 - Unauthenticated Arbitrary File Download/Deletion vulnerability | CRITICAL | 0.60% | Aug 29, 2024 |
| CVE-2024-43954 | WordPress Droip plugin <= 1.1.1 - Subscriber+ Settings Change/Data Exposure Vulnerability | MEDIUM | 0.28% | Aug 29, 2024 |
Showing 1 to 4 of 4 CVEs