Login Request a demo
DR
Product
Droip
by Themeum · last CVE Jul 25, 2025
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities4Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Droip to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-5835
8.8
0%
Jul 25
The Droip plugin for WordPress is vulnerable to unauthorized modification and access of data due to a missing capability check on the droip_post_apis() function in all versions up…
Affected: through 2.2.0
CVE-2025-5831
8.8
1%
Jul 25
The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_google_font_offline() function in all versions up to, and…
Affected: through 2.2.0
CVE-2024-43955
7.5
1%
Aug 29
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themeum Droip allows File Manipulation.This issue affects Droip: from n/a through…
Affected: through 1.1.1
CVE-2024-43954
6.3
0%
Aug 29
Incorrect Authorization vulnerability in Themeum Droip allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Droip: from n/a through 1.1.1
Affected: through 1.1.1
Showing 4