WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
z-companion
Published
2025-03-27
Title
Z Companion < 1.1.0 - Missing Authorization
Slug
z-companion
Published
2025-04-10
Title
Z Companion < 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
z-downloads
Published
2024-05-10
Title
Z-Downloads < 1.11.4 - Authenticated (Admin+) Arbitrary File Upload
Slug
z-downloads
Published
2024-08-06
Title
Z-Downloads < 1.11.7 - Admin+ Stored XSS via SVG Upload
Slug
z-downloads
Published
2024-08-06
Title
Z-Downloads < 1.11.5 - Admin+ Arbitrary File Upload
Slug
z-downloads
Published
2024-08-09
Title
Z-Downloads < 1.11.6 - Unauthenticated Stored XSS
Slug
z-downloads
Published
2024-12-02
Title
Z-Downloads < 1.11.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
z-inventory-manager
Published
2025-01-03
Title
PlainInventory < 3.1.7 - Unauthenticated PHP Object Injection
Slug
z-inventory-manager
Published
2025-04-09
Title
PlainInventory <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
z-url-preview
Published
2017-12-05
Title
Z-URL Preview < 2.0.0 - Cross-Site Scripting (XSS)
Slug
z-vote
Published
2014-08-01
Title
Z-Vote 1.1 - SQL Injection
Slug
zajax-ajax-navigation
Published
2024-11-22
Title
Zajax – Ajax Navigation <= 0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
zalo-live-chat
Published
2025-03-20
Title
Zalo Live Chat <= 1.1.0 - Reflected Cross-Site Scripting
Slug
zalo-official-live-chat
Published
2025-04-24
Title
Zalo Official Live Chat <= 1.0.0 - Cross-Site Request Forgery
Slug
zalomeni
Published
2025-01-10
Title
Zalomení <= 1.5 - Admin+ Stored XSS
Slug
zapier
Published
2025-03-25
Title
Zapier for WordPress < 1.5.2 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via updated_user Function
Slug
zapier
Published
2025-06-19
Title
Zapier for WordPress < 1.5.3 - Missing Authorization
Slug
zara-4
Published
2025-06-19
Title
Zara 4 Image Compression <= 1.2.17.2 - Missing Authorization
Slug
zarinpal-paid-downloads
Published
2025-01-21
Title
Zarinpal Paid Downloads <= 2.3 - Reflected XSS
Slug
zarinpal-paid-downloads
Published
2025-01-21
Title
Zarinpal Paid Downloads <= 2.3 - Admin+ Arbitrary File Upload
Slug
zarinpal-paid-downloads
Published
2025-01-14
Title
Zarinpal Paid Download <= 2.3 - Reflected Cross-Site Scripting
Slug
zartis-job-plugin
Published
2025-01-14
Title
HireHive Job Plugin <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
zarzadzanie_kontem
Published
2014-08-01
Title
Zarzadzanie Kontem - ajaxfilemanager.php File Upload Arbitrary Code Execution
Slug
zd-scribd-ipaper
Published
2025-03-20
Title
ZD Scribd iPaper <= 1.0 - Reflected Cross-Site Scripting
Slug
zd-youtube-flv-player
Published
2024-04-29
Title
ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery