WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
zotpress
Published
2026-10-08
Title
Zotpress < 7.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
zox-news
Published
2025-02-10
Title
Zox News < 3.17.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Modification
Slug
zportals
Published
2026-07-28
Title
Zportals < 6.3.4 - Subscriber+ Arbitrary File Upload
Slug
zportals
Published
2026-09-21
Title
Zportals < 6.4.2 - Subscriber+ Arbitrary Plugin Settings Update
Slug
zportals
Published
2026-09-21
Title
Zportals < 6.4.2 - Subscriber+ User Email Disclosure
Slug
zstore-manager-basic
Published
2025-01-30
Title
zStore Manager Basic <= 3.311 - Missing Authorization to Authenticated (Subscriber+) Cache Clearing
Slug
zt-captcha
Published
2026-01-23
Title
ZT Captcha <= 1.0.4 - Cross-Site Request Forgery to Settings Update
Slug
zuppler-online-ordering
Published
2025-07-17
Title
Zuppler Online Ordering <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
zweb-social-mobile
Published
2025-11-24
Title
ZWeb - Social Mobile <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
zx-csv-upload
Published
2016-12-12
Title
ZX_CSV Upload 1 – Authenticated SQL Injection
Slug
zynith-seo
Published
2024-04-16
Title
Zynith SEO <= 7.4.9 - Unauthenticated Stored Cross-Site Scripting
Slug
zynith-seo
Published
2024-08-26
Title
Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Arbitrary Option Deletion
Slug
zynith-seo
Published
2024-08-26
Title
Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Settings Update
Slug
zypento-blocks
Published
2026-04-21
Title
Zypento Blocks <= 1.0.6 - Authenticated (Author+) Stored Cross-Site Scripting via Table of Contents Block