WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
zero-spam
Published
2026-10-05
Title
Zero Spam < 5.7.12 - Unauthenticated Spam Protection Bypass on Login
Slug
zero-spam
Published
2026-09-24
Title
Zero Spam for WordPress < 5.7.11 - Unauthenticated Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration
Slug
zerobounce
Published
2023-12-26
Title
ZeroBounce Email Verification & Validation < 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
zhbackup
Published
2026-09-09
Title
ZHBackup – Backup, Restore & Migration < 2.4.3 - Unauthenticated Information Exposure
Slug
zhina-twitter-widget
Published
2025-03-20
Title
ZhinaTwitterWidget <= 1.0 - Reflected Cross-Site Scripting
Slug
zielke-design-project-gallery
Published
2025-03-19
Title
Zielke Design Project Gallery <= 2.5.0 - Reflected Cross-Site Scripting
Slug
zigaform-calculator-cost-estimation-form-builder-lite
Published
2025-02-17
Title
Zigaform – Price Calculator & Cost Estimation Form Builder Lite < 7.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
zigaform-calculator-cost-estimation-form-builder-lite
Published
2025-02-23
Title
Zigaform – Price Calculator & Cost Estimation Form Builder Lite < 7.4.3 - Unauthenticated Stored Cross-Site Scripting
Slug
zigaform-calculator-cost-estimation-form-builder-lite
Published
2025-12-01
Title
Zigaform < 7.6.7 - Unauthenticated Form Submission Data Disclosure in rocket_front_payment_seesummary AJAX Endpoint
Slug
zigaform-form-builder-lite
Published
2025-02-17
Title
Zigaform – Form Builder Lite < 7.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
zigaform-form-builder-lite
Published
2025-03-03
Title
Zigaform – Form Builder Lite < 7.4.3 - Unauthenticated Stored Cross-Site Scripting
Slug
ziggeo
Published
2025-02-20
Title
Ziggeo < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ziggeo
Published
2026-04-08
Title
Ziggeo < 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via 'ziggeo_ajax' AJAX Action
Slug
ziina
Published
2026-07-22
Title
Ziina < 1.2.22 - Missing Authorization
Slug
zij-kart
Published
2024-11-11
Title
ZIJ KART <= 1.1 - Unauthenticated Local File Inclusion
Slug
zikzag-core
Published
2025-06-24
Title
Zikzag Core < 1.4.6 - Unauthenticated Local File Inclusion
Slug
zingaya-click-to-call
Published
2026-05-04
Title
Zingaya Click-to-Call <= 1.0 - Reflected Cross-Site Scripting via 'email' Parameter
Slug
zingiri-forum
Published
2014-08-01
Title
Zingiri Forum 1.4.2 - forum.php zing_forum_output Function url Parameter XSS
Slug
zingiri-tickets
Published
2014-08-01
Title
Zingiri Tickets - File Disclosure
Slug
zingiri-web-shop
Published
2014-08-01
Title
Zingiri Web Shop 2.6.4 - mform.php Unspecified Issue
Slug
zingiri-web-shop
Published
2014-08-01
Title
Zingiri Web Shop - Cookie SQL Injection
Slug
zingiri-web-shop
Published
2014-08-01
Title
Zingiri Web Shop < 2.4.2 - zing.inc.php page Parameter XSS
Slug
zingiri-web-shop
Published
2014-08-01
Title
Zingiri Web Shop < 2.4.2 - onecheckout.php notes Parameter XSS
Slug
zingiri-web-shop
Published
2014-09-28
Title
Zingiri Web Shop 2.2.0 - init.inc wpabspath Parameter Remote File Inclusion
Slug
zingiri-web-shop
Published
2012-04-18
Title
Zingiri Web Shop < 2.4.0 - Multiple Unspecified Issues