WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
zephyr-project-manager
Published
2024-08-14
Title
Zephyr Project Manager < 3.3.102 - Authenticated (Subscriber+) Limited Privilege Escalation
Slug
zephyr-project-manager
Published
2024-08-16
Title
Zephyr Project Manager < 3.3.101 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
zephyr-project-manager
Published
2024-08-20
Title
Zephyr Project Manager < 3.3.103 - Reflected Cross-Site Scripting
Slug
zephyr-project-manager
Published
2024-08-20
Title
Zephyr Project Manager < 3.3.103 - Missing Authorization to Authenticated (Subscriber+) Status Updates
Slug
zephyr-project-manager
Published
2025-04-10
Title
Zephyr Project Manager < 3.3.102 - Reflected Cross-Site Scripting
Slug
zephyr-project-manager
Published
2025-04-16
Title
Zephyr Project Manager < 3.3.201 - Missing Authorization
Slug
zephyr-project-manager
Published
2025-08-26
Title
Zephyr Project Manager < 3.3.202 - Missing Authorization
Slug
zephyr-project-manager
Published
2025-09-25
Title
Zephyr Project Manager < 3.3.203 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
zephyr-project-manager
Published
2025-12-16
Title
Zephyr Project Manager < 3.3.204 - Authenticated (Custom+) Arbitrary File Read And Server-Side Request Forgery
Slug
zero-bs-crm
Published
2022-11-21
Title
Jetpack CRM < 5.4.3 - Admin+ Cross-Site Scripting
Slug
zero-bs-crm
Published
2023-03-05
Title
Jetpack CRM < 5.5.0 - Admin+ Stored XSS
Slug
zero-bs-crm
Published
2022-12-19
Title
Jetpack CRM < 5.5 - Contributor+ Stored XSS
Slug
zero-bs-crm
Published
2023-04-18
Title
Jetpack CRM < 5.4.0 - PHAR Deserialisation via CSRF
Slug
zero-bs-crm
Published
2023-09-12
Title
Jetpack CRM < 5.5.1 - Client+ XSS
Slug
zero-bs-crm
Published
2023-09-12
Title
Jetpack CRM < 5.5.1 - CRM Admin+ XSS
Slug
zero-bs-crm
Published
2021-09-14
Title
Jetpack CRM WooCommerce Connect < 2.13 - Unauthorized Invoice Disclosure
Slug
zero-bs-crm
Published
2026-02-16
Title
Jetpack CRM < 6.7.1 - Unauthenticated Local File Inclusion
Slug
zero-spam
Published
2016-08-24
Title
WordPress Zero Spam < 2.2.0 - Unauthenticated Blind SQL Injection
Slug
zero-spam
Published
2022-02-18
Title
Zero Spam < 5.2.11 - Admin+ SQL Injection
Slug
zero-spam
Published
2023-05-09
Title
Zero Spam < 5.4.5 - Admin+ SQL Injection
Slug
zero-spam
Published
2024-04-15
Title
Zero Spam < 5.5.7 - Spam Protection Bypass
Slug
zerobounce
Published
2023-12-26
Title
ZeroBounce Email Verification & Validation < 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
zhina-twitter-widget
Published
2025-03-20
Title
ZhinaTwitterWidget <= 1.0 - Reflected Cross-Site Scripting
Slug
zielke-design-project-gallery
Published
2025-03-19
Title
Zielke Design Project Gallery <= 2.5.0 - Reflected Cross-Site Scripting
Slug
zigaform-calculator-cost-estimation-form-builder-lite
Published
2025-02-17
Title
Zigaform – Price Calculator & Cost Estimation Form Builder Lite < 7.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting