WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
zm-ajax-login-register
Published
2015-06-04
Title
zM Ajax Login & Register 1.0.9 - Local File Inclusion & XSS
Slug
zm-ajax-login-register
Published
2023-04-14
Title
ZM Ajax Login & Register <= 2.0.2 - Unauthenticated Authentication Bypass
Slug
zm-gallery
Published
2016-12-14
Title
ZM Gallery 1.0 – Authenticated Blind SQL Injection
Slug
zmseo
Published
2025-02-03
Title
ZMSEO <= 1.14.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
znajdz-prace-z-pracapl
Published
2024-11-28
Title
Znajdź Pracę z Praca.pl <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
zoho-campaigns
Published
2024-04-12
Title
Zoho Campaigns < 2.0.8 - Cross-Site Request Forgery via zcwc_integration_disconnect
Slug
zoho-campaigns
Published
2024-04-12
Title
Zoho Campaigns < 2.0.8 - Cross-Site Request Forgery via zcwc_optin_save
Slug
zoho-campaigns
Published
2024-03-26
Title
Zoho Campaigns < 2.0.7 - Authenticated (Contributor+) SQL Injection
Slug
zoho-campaigns
Published
2024-07-11
Title
Zoho Campaigns < 2.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
zoho-crm-forms
Published
2019-10-15
Title
Zoho CRM Lead Magnet Plugin - Authenticated Cross Site Scripting (XSS)
Slug
zoho-crm-forms
Published
2021-09-01
Title
Zoho CRM Lead Magnet < 1.7.2.9 - Admin+ Stored Cross-Site Scripting
Slug
zoho-crm-forms
Published
2022-10-27
Title
Zoho CRM Lead Magnet < 1.7.6.2 - Subscriber+ Arbitrary Options Update
Slug
zoho-crm-forms
Published
2024-07-11
Title
Zoho CRM Lead Magnet < 1.7.8.9 - Reflected Cross-Site Scripting
Slug
zoho-crm-forms
Published
2024-10-15
Title
Zoho CRM Lead Magnet < 1.7.9.8 - Contributor+ SQL Injection
Slug
zoho-crm-forms
Published
2026-01-15
Title
Zoho CRM Lead Magnet < 1.8.2.0 - Missing Authorization
Slug
zoho-flow
Published
2024-09-26
Title
Zoho Flow for WordPress < 2.8.1 - Authenticated (Administrator+) SQL Injection
Slug
zoho-flow
Published
2025-04-01
Title
Zoho Flow < 2.13.4 - Missing Authorization
Slug
zoho-flow
Published
2025-09-10
Title
Zoho Flow < 2.14.2 - Cross-Site Request Forgery
Slug
zoho-flow
Published
2025-09-22
Title
Zoho Flow < 2.14.2 - Cross-Site Request Forgery
Slug
zoho-flow
Published
2026-10-26
Title
Zoho Flow – No-Code Workflow Automation < 2.14.6 - Unauthenticated PHP Object Injection
Slug
zoho-forms
Published
2023-01-23
Title
Zoho Forms < 3.0.1 - Contributor+ Stored XSS
Slug
zoho-forms
Published
2023-12-26
Title
Zoho Forms < 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
zoho-forms
Published
2024-09-30
Title
Zoho Forms < 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
zoho-marketinghub
Published
2024-06-21
Title
Zoho Marketing Automation < 1.2.8 - Authenticated (Contributor+) SQL Injection
Slug
zoho-salesiq
Published
2019-05-31
Title
Zoho SalesIQ <= 1.0.8 - XSS & CSRF