Droip <= 2.2.0 - Authenticated (Subscriber+) Arbitrary File Upload

CVE Details

Basic Information

Title Droip <= 2.2.0 - Authenticated (Subscriber+) Arbitrary File Upload
Type cve
Published 2025-07-25T06:43:54.605Z
Modified 2025-07-25T06:43:54.605Z

Product Information

Vendor Droip
Product Droip
Version *

CVSS Information

Base Score 8.8 (HIGH)
Attack Vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

  • Droip Droip *

Additional Information

CWE List CWE-434
Source Wordfence

Description

The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_google_font_offline() function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site’s server which may make remote code execution possible.

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.