Zendrop

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Zendrop records in CISA KEV

No Zendrop vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zendrop 2 records MEDIUM

Records

2 records

TI-2023-11205 CVE-2023-25960 · GHSA-gwp9-gfc2-vccq

WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to SQL Injection

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zendrop Zendrop – Global Dropshipping zendrop-dropshipping-and-fulfillment allows SQL Injection.This issue affects Zen…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0069 Published 2023-11-03 No fix listed CWE-89

TI-2023-11215 CVE-2023-25970 · GHSA-6287-c9rq-hvg4

WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload

MEDIUM 45

Unrestricted Upload of File with Dangerous Type vulnerability in Zendrop Zendrop – Global Dropshipping.This issue affects Zendrop – Global Dropshipping: from n/a through 1.0.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00942 Published 2023-12-20 No fix listed CWE-434

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0