WP Dropzone Security & Risk Analysis

wordpress.org/plugins/wp-dropzone

Upload files into WordPress media library from front-end with drag-and-drop functionality and customizable options.

80 active installs v1.1.2 PHP 7.0+ WP 6.0+ Updated Jul 14, 2026
dropzonefile-uploadimage-uploadmediamedia-upload
74
B · Generally Safe
CVEs total2
Unpatched1
Last CVEDec 11, 2025
Safety Verdict

Is WP Dropzone Safe to Use in 2026?

Mostly Safe

Score 74/100

WP Dropzone is generally safe to use. 2 past CVEs were resolved.

2 known CVEs 1 unpatched Last CVE: Dec 11, 2025Updated 1mo ago
Risk Assessment
Assessment pending
Vulnerabilities
2 published

WP Dropzone Security Vulnerabilities

CVEs by Year

2 CVEs in 2025 · unpatched
2025
Patched Has unpatched

Severity Breakdown

High
1
Medium
1

2 total CVEs

CVE-2025-13989medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Dropzone <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'callback' Shortcode Attribute

Dec 11, 2025Unpatched
CVE-2025-12775high · 8.8Unrestricted Upload of File with Dangerous Type

WP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload

Nov 17, 2025 Patched in 1.1.1 (1d)
Version History

WP Dropzone Release Timeline

Maintenance & Trust

WP Dropzone Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJul 14, 2026
PHP min version7.0
Downloads4K

Community Trust

Rating86/100
Number of ratings4
Active installs80
Developer Profile

WP Dropzone Developer Profile

Nazmul Sabuz

4 plugins · 240 total installs

96
trust score
Avg Security Score
94/100
Avg Patch Time
1 days
View full developer profile
FAQ

Frequently Asked Questions about WP Dropzone