What’s Vulnerable › Products

Themeum Droip vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Themeum Droip version is affected

Latest Themeum Droip vulnerabilities

• CVE-2025-5835 — Droip <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Many Actions (CVSS 8.8)
• CVE-2025-5831 — Droip < 2.5.2 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
• CVE-2024-43955 — WordPress Droip plugin <= 1.1.1 - Unauthenticated Arbitrary File Download/Deletion vulnerability (CVSS 7.5)
• CVE-2024-43954 — WordPress Droip plugin <= 1.1.1 - Subscriber+ Settings Change/Data Exposure Vulnerability (CVSS 6.3)