WD
Product
WP Dropzone
by nazsabuz · last CVE Dec 12, 2025
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add WP Dropzone to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-13989
6.4
0%
Dec 12
WP Dropzone <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'callback' Shortcode Attribute
Affected: through 1.1.1
Showing 1