mulika vulnerabilities

Products

• MIPL Grouped Checkout Fields for WooCommerce. Customize & Organize Checkout Fields. 1
• MIPL Multistore Sync for WooCommerce. Sync Products, Stock and Orders. 1

Latest mulika CVEs

Newest publication first

1. CVE-2026-8778 MIPL Grouped Checkout Fields for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File Upload

   Published 2026-09-11

   Critical·CVSS 9.8 EPSS 1.1%

   The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mipl_wc_upload_file function in all versions up to, and including, 1.2.1. This makes it...

2. CVE-2024-12152 MIPL WC Multisite Sync <= 1.1.5 - Unauthenticated Arbitrary File Download

   Published 2025-01-07

   High·CVSS 7.5 EPSS 1.1%

   The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.5 via the 'mipl_wc_sync_download_log' action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.