This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2025-49885 | BDVDB-2026-284069 Detail

HaruThemeDrag and Drop Multiple File Upload (Pro) - WooCommerce

Description#

Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme Drag and Drop Multiple File Upload (Pro) - WooCommerce drag-and-drop-file-upload-wc-pro allows Upload a Web Shell to a Web Server.This issue affects Drag and Drop Multiple File Upload (Pro) - WooCommerce: from n/a through <= 5.0.6.

Impact#

Upload a Web Shell to a Web Server

Weaknesses#

  • CWE-434 Unrestricted Upload of File with Dangerous Type

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.