WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
zd-youtube-flv-player
Published
2024-04-29
Title
ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery
Slug
zdstats
Published
2014-08-01
Title
ZdStatistics < 2.0.1 - Cross-Site Scripting (XSS)
Slug
zedity
Published
2014-08-01
Title
Zedity <= 2.5.0 - Cross-Site Scripting (XSS)
Slug
zedity
Published
2014-08-01
Title
Zedity < 2.5.1 - Cross-Site Scripting (XSS)
Slug
zeenshare
Published
2014-08-01
Title
ZeenShare plugin < 1.0.1 - Cross-Site Scripting (XSS)
Slug
zegen-core
Published
2025-11-21
Title
Zegen Core < 2.0.2 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
zemanta
Published
2024-10-25
Title
Editorial Assistant by Sovrn <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Attachment Upload and Set Post Featured Image
Slug
zen-mobile-app-native
Published
2017-02-28
Title
Mobile App Native <= 3.0 - Remote File Upload
Slug
zen-social-sticky
Published
2025-06-13
Title
Zen Sticky Social <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
zendesk-help-center
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
zeno-font-resizer
Published
2023-02-15
Title
Zeno Font Resizer < 1.8.0 - Admin+ Stored XSS
Slug
zenost-shortcodes
Published
2025-12-11
Title
Zenost Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
zenphoto
Published
2014-08-01
Title
Zenphoto 1.4.5.2 - wordpress_import.php wp_prefix Function SQL Injection
Slug
zenphotopress
Published
2025-03-22
Title
ZenphotoPress <= 1.8 - Reflected Cross-Site Scripting
Slug
zephyr-modern-admin-theme
Published
2025-01-07
Title
Zephyr Admin Theme < 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
zephyr-project-manager
Published
2022-05-23
Title
Zephyr Project Manager < 3.2.41 - Reflected Cross-Site Scripting
Slug
zephyr-project-manager
Published
2022-08-29
Title
Zephyr Project Manager < 3.2.5 - Reflected Cross-Site Scripting
Slug
zephyr-project-manager
Published
2022-08-29
Title
Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi
Slug
zephyr-project-manager
Published
2022-08-29
Title
Zephyr Project Manager < 3.2.5 - Unauthorised REST Calls to Stored XSS
Slug
zephyr-project-manager
Published
2022-09-08
Title
Zephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSS
Slug
zephyr-project-manager
Published
2023-06-13
Title
Zephyr Project Manager < 3.3.94 - Plugin Data Deletion via CSRF
Slug
zephyr-project-manager
Published
2024-07-09
Title
Zephyr Project Manager < 3.3.99 - Editor+ XSS
Slug
zephyr-project-manager
Published
2024-07-04
Title
Zephyr Project Manager < 3.3.99 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update
Slug
zephyr-project-manager
Published
2024-07-12
Title
Zephyr Project Manager < 3.3.100 - Unauthenticated Information Exposure
Slug
zephyr-project-manager
Published
2024-08-02
Title
Zephyr Project Manager < 3.3.101 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename Parameter