quicoto

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

quicoto records in CISA KEV

No quicoto vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Thumbs Rating 1 record LOW

Records

3 records

TI-2025-10726 CVE-2025-11701 · GHSA-f244-gm76-qc53

Missing authorization in quicoto Zip Attachments

LOW 30

The Zip Attachments plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check as well as missing post status validation in the za_create_zip_callback function in all versions up…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00286 Published 2025-10-15 No fix listed CWE-862

TI-2025-10717 CVE-2025-11692 · GHSA-jr2c-fv9j-f272

Zip Attachments <= 1.6 - Missing Authorization to Limited File Deletion

LOW 30

The Zip Attachments plugin for WordPress is vulnerable to unauthorized loss of data due to a missing authorization and capability checks on the download.php file in all versions up to, and including, 1.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0024 Published 2025-10-15 No fix listed CWE-862

TI-2022-22613 CVE-2022-45809 · GHSA-wmh7-j79p-r4x9

WordPress Thumbs Rating Plugin <= 5.0.0 is vulnerable to Race Condition

LOW 30

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00403 Published 2023-12-18 No fix listed CWE-367

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0