WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
zionbuilder
Published
2024-03-28
Title
WordPress Page Builder – Zion Builder < 3.6.10 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
zionbuilder
Published
2024-12-02
Title
WordPress Page Builder – Zion Builder < 3.6.17 - Contributor+ Stored XSS
Slug
zip-attachments
Published
2015-06-12
Title
Zip Attachments < 1.5 - Arbitrary File Download
Slug
zip-attachments
Published
2025-10-14
Title
Zip Attachments <= 1.6 - Missing Authorization to Limited File Deletion
Slug
zip-attachments
Published
2025-10-14
Title
Zip Attachments <= 1.6 - Missing Authorization to Unauthenticated Private And Password-Protected Posts Attachment Disclosure
Slug
zip-code-based-content-protection
Published
2025-09-08
Title
ZIP Code Based Content Protection < 1.0.1 - Authenticated (Administrator+) SQL Injection
Slug
zip-code-based-content-protection
Published
2026-03-06
Title
ZIP Code Based Content Protection < 1.0.3 - Unauthenticated SQL Injection via 'zipcode' Parameter
Slug
zip-codes-redirect
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
zip-codes-redirect
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
zip-recipes
Published
2023-07-17
Title
Recipe Maker For Your Food Blog from Zip Recipes < 8.0.8 - Cross-Site Request Forgery
Slug
zip-recipes
Published
2023-04-24
Title
Recipe Maker For Your Food Blog from Zip Recipes < 8.0.7 - Reflected XSS
Slug
zip-recipes
Published
2023-06-15
Title
Recipe Maker For Your Food Blog from Zip Recipes < 8.0.8 - Multiple CSRF
Slug
zip-recipes
Published
2023-12-29
Title
Recipe Maker For Your Food Blog from Zip Recipes < 8.1.1 - Authenticated(Contributor+) SQL Injection
Slug
zip-recipes
Published
2024-07-10
Title
Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.6 - Unauthenticated Sensitive Information Exposure
Slug
zip-recipes
Published
2026-06-26
Title
Recipe Cards For Your Food Blog from Zip Recipes < 8.2.8 - Authenticated (Contributor+) SQL Injection
Slug
ziplist-recipe-plugin
Published
2025-03-11
Title
ZipList Recipe <= 3.1 - Cross-Site Request Forgery
Slug
zipmoney-payments-woocommerce
Published
2026-09-08
Title
zipMoney(Zip Co) Payments Plugin for WooCommerce < 2.4.0 - Unauthenticated Arbitrary Option Deletion
Slug
zippy
Published
2024-03-13
Title
Zippy < 1.6.10 - Authenticated (Editor+) Arbitrary File Upload
Slug
zippy
Published
2026-10-28
Title
Zippy <= 1.7.0 - Authenticated (Editor+) PHP Object Injection
Slug
zita-site-library
Published
2024-06-24
Title
Zita Elementor Site Library < 1.6.3 - Missing Authorization to Page Creation and Options Modification
Slug
zita-site-library
Published
2024-06-28
Title
Zita Elementor Site Library < 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Slug
zita-site-library
Published
2024-10-15
Title
Zita Elementor Site Library < 1.6.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
zita-site-library
Published
2026-01-28
Title
Zita Site Library for Elementor < 1.6.7 - Cross-Site Request Forgery
Slug
ziteboard-online-whiteboard
Published
2023-11-06
Title
Ziteboard Online Whiteboard < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ziteboard Shortcode
Slug
zlick-paywall
Published
2021-05-08
Title
Zlick Paywall < 2.2.2 - CSRF Bypasses