CVE-2026-16054 | WooCommerce Drag and Drop Multiple File Upload Plugin up to 1.1.7 on WordPress file inclusion

August 6, 2026 Yanac

A vulnerability labeled as critical has been found in WooCommerce Drag and Drop Multiple File Upload Plugin up to 1.1.7 on WordPress. This vulnerability affects unknown code. The manipulation results in file inclusion.

This vulnerability is identified as CVE-2026-16054. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More