Vulnerabilities in nazsabuz

2 results

CVE-2025-12775HIGHWP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.5%CVE-2025-13989MEDIUMWP Dropzone <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'callback' Shortcode AttributeEPSS 0.2%