ZIPANG

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

ZIPANG records in CISA KEV

No ZIPANG vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-32910 CVE-2024-49317 · GHSA-qg3g-xgh9-3rhh

WordPress Point Maker plugin <= 0.1.4 - Local File Inclusion vulnerability

LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ZIPANG Point Maker point-maker allows PHP Local File Inclusion.This issue affects Point Maker: from…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0056 Published 2024-10-17 No fix listed CWE-98

TI-2025-30455 CVE-2025-48085 · GHSA-xpx5-8gpf-9924

WordPress Simple Stripe plugin <= 0.9.17 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in ZIPANG Simple Stripe simple-stripe allows Stored XSS.This issue affects Simple Stripe: from n/a through <= 0.9.17.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00127 Published 2025-11-06 No fix listed CWE-352

TI-2024-11876 CVE-2024-12815 · GHSA-p2c4-4487-qjm7

Point Maker <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Point Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'point_maker' shortcode in all versions up to, and including, 0.1.6 due to insufficient input sanitization and output esc…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00302 Published 2025-03-05 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0