WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
z-url-preview
Published
2017-12-05
Title
Z-URL Preview < 2.0.0 - Cross-Site Scripting (XSS)
Slug
z-vote
Published
2014-08-01
Title
Z-Vote 1.1 - SQL Injection
Slug
zarzadzanie_kontem
Published
2014-08-01
Title
Zarzadzanie Kontem - ajaxfilemanager.php File Upload Arbitrary Code Execution
Slug
zd-youtube-flv-player
Published
2024-04-29
Title
ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery
Slug
zdstats
Published
2014-08-01
Title
ZdStatistics < 2.0.1 - Cross-Site Scripting (XSS)
Slug
zedity
Published
2014-08-01
Title
Zedity <= 2.5.0 - Cross-Site Scripting (XSS)
Slug
zedity
Published
2014-08-01
Title
Zedity < 2.5.1 - Cross-Site Scripting (XSS)
Slug
zeenshare
Published
2014-08-01
Title
ZeenShare plugin < 1.0.1 - Cross-Site Scripting (XSS)
Slug
zen-mobile-app-native
Published
2017-02-28
Title
Mobile App Native <= 3.0 - Remote File Upload
Slug
zendesk-help-center
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
zeno-font-resizer
Published
2023-02-15
Title
Zeno Font Resizer < 1.8.0 - Admin+ Stored XSS
Slug
zenphoto
Published
2014-08-01
Title
Zenphoto 1.4.5.2 - wordpress_import.php wp_prefix Function SQL Injection
Slug
zephyr-project-manager
Published
2022-05-23
Title
Zephyr Project Manager < 3.2.41 - Reflected Cross-Site Scripting
Slug
zephyr-project-manager
Published
2022-08-29
Title
Zephyr Project Manager < 3.2.5 - Reflected Cross-Site Scripting
Slug
zephyr-project-manager
Published
2022-08-29
Title
Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi
Slug
zephyr-project-manager
Published
2022-08-29
Title
Zephyr Project Manager < 3.2.5 - Unauthorised REST Calls to Stored XSS
Slug
zephyr-project-manager
Published
2022-09-08
Title
Zephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSS
Slug
zephyr-project-manager
Published
2023-06-13
Title
Zephyr Project Manager < 3.3.94 - Plugin Data Deletion via CSRF
Slug
zero-bs-crm
Published
2022-11-21
Title
Jetpack CRM < 5.4.3 - Admin+ Cross-Site Scripting
Slug
zero-bs-crm
Published
2023-03-05
Title
Jetpack CRM < 5.5.0 - Admin+ Stored XSS
Slug
zero-bs-crm
Published
2023-04-18
Title
Jetpack CRM < 5.4.0 - PHAR Deserialisation via CSRF
Slug
zero-bs-crm
Published
2022-12-19
Title
Jetpack CRM < 5.5 - Contributor+ Stored XSS
Slug
zero-bs-crm
Published
2023-09-12
Title
Jetpack CRM < 5.5.1 - Client+ XSS
Slug
zero-bs-crm
Published
2023-09-12
Title
Jetpack CRM < 5.5.1 - CRM Admin+ XSS
Slug
zero-spam
Published
2016-08-24
Title
WordPress Zero Spam < 2.2.0 - Unauthenticated Blind SQL Injection