WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
zotpress
Published
2024-05-07
Title
Zotpress < 7.3.10 - Authenticated (Contributor+) Cross-Site Scripting
Slug
zotpress
Published
2024-09-30
Title
Zotpress < 7.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
zotpress
Published
2024-11-04
Title
Zotpress < 7.3.13 - Missing Authorization
Slug
zotpress
Published
2025-06-10
Title
ZotPress < 7.4 - Authenticated (Author+) Stored Cross-Site Scripting via 'nickname'
Slug
zox-news
Published
2025-02-10
Title
Zox News < 3.17.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Modification
Slug
zstore-manager-basic
Published
2025-01-30
Title
zStore Manager Basic <= 3.311 - Missing Authorization to Authenticated (Subscriber+) Cache Clearing
Slug
zuppler-online-ordering
Published
2025-07-17
Title
Zuppler Online Ordering <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
zweb-social-mobile
Published
2025-11-24
Title
ZWeb - Social Mobile <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
zx-csv-upload
Published
2016-12-12
Title
ZX_CSV Upload 1 – Authenticated SQL Injection
Slug
zynith-seo
Published
2024-04-16
Title
Zynith SEO <= 7.4.9 - Unauthenticated Stored Cross-Site Scripting
Slug
zynith-seo
Published
2024-08-26
Title
Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Arbitrary Option Deletion
Slug
zynith-seo
Published
2024-08-26
Title
Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Settings Update