Zingiri

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Zingiri records in CISA KEV

No Zingiri vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zingiri Web Shop 2 records MEDIUM Forums 1 record LOW Theme Tuner Plugin 1 record MEDIUM

Records

4 records

TI-2012-03453 CVE-2012-4033 · GHSA-7fhj-rrpr-r2cg

Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for…

MEDIUM 48

Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02607 Published 2012-07-18 No fix listed

TI-2012-00859 CVE-2012-0934 · GHSA-qp57-c66w-h9pw

PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for…

MEDIUM 44

PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.08057 Published 2012-01-29 No fix listed CWE-94

TI-2012-04158 CVE-2012-4920 · GHSA-v6p6-mvpj-6338

Directory traversal vulnerability in the zing_forum_output function in forum.php in the…

LOW 29

Directory traversal vulnerability in the zing_forum_output function in forum.php in the Zingiri Forum (aka Forums) plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03261 Published 2014-04-04 No fix listed CWE-22

TI-2012-05224 CVE-2012-6506 · GHSA-f9f8-xghc-582j

Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0…

LOW 28

Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05313 Published 2013-01-24 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0