WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
zip-codes-redirect
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
zip-codes-redirect
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
zip-recipes
Published
2023-07-17
Title
Recipe Maker For Your Food Blog from Zip Recipes < 8.0.8 - Cross-Site Request Forgery
Slug
zip-recipes
Published
2023-04-24
Title
Recipe Maker For Your Food Blog from Zip Recipes < 8.0.7 - Reflected XSS
Slug
zip-recipes
Published
2023-06-15
Title
Recipe Maker For Your Food Blog from Zip Recipes < 8.0.8 - Multiple CSRF
Slug
zip-recipes
Published
2023-12-29
Title
Recipe Maker For Your Food Blog from Zip Recipes < 8.1.1 - Authenticated(Contributor+) SQL Injection
Slug
zip-recipes
Published
2024-07-10
Title
Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.6 - Unauthenticated Sensitive Information Exposure
Slug
ziplist-recipe-plugin
Published
2025-03-11
Title
ZipList Recipe <= 3.1 - Cross-Site Request Forgery
Slug
zippy
Published
2024-03-13
Title
Zippy < 1.6.10 - Authenticated (Editor+) Arbitrary File Upload
Slug
zita-site-library
Published
2024-06-24
Title
Zita Elementor Site Library < 1.6.3 - Missing Authorization to Page Creation and Options Modification
Slug
zita-site-library
Published
2024-06-28
Title
Zita Elementor Site Library < 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Slug
zita-site-library
Published
2024-10-15
Title
Zita Elementor Site Library < 1.6.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
zita-site-library
Published
2026-01-28
Title
Zita Site Library for Elementor < 1.6.7 - Cross-Site Request Forgery
Slug
ziteboard-online-whiteboard
Published
2023-11-06
Title
Ziteboard Online Whiteboard < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ziteboard Shortcode
Slug
zlick-paywall
Published
2021-05-08
Title
Zlick Paywall < 2.2.2 - CSRF Bypasses
Slug
zm-ajax-login-register
Published
2015-06-04
Title
zM Ajax Login & Register 1.0.9 - Local File Inclusion & XSS
Slug
zm-ajax-login-register
Published
2023-04-14
Title
ZM Ajax Login & Register <= 2.0.2 - Unauthenticated Authentication Bypass
Slug
zm-gallery
Published
2016-12-14
Title
ZM Gallery 1.0 – Authenticated Blind SQL Injection
Slug
zmseo
Published
2025-02-03
Title
ZMSEO <= 1.14.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
znajdz-prace-z-pracapl
Published
2024-11-28
Title
Znajdź Pracę z Praca.pl <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
zoho-campaigns
Published
2024-04-12
Title
Zoho Campaigns < 2.0.8 - Cross-Site Request Forgery via zcwc_integration_disconnect
Slug
zoho-campaigns
Published
2024-04-12
Title
Zoho Campaigns < 2.0.8 - Cross-Site Request Forgery via zcwc_optin_save
Slug
zoho-campaigns
Published
2024-03-26
Title
Zoho Campaigns < 2.0.7 - Authenticated (Contributor+) SQL Injection
Slug
zoho-campaigns
Published
2024-07-11
Title
Zoho Campaigns < 2.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
zoho-crm-forms
Published
2019-10-15
Title
Zoho CRM Lead Magnet Plugin - Authenticated Cross Site Scripting (XSS)