Zyrex

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Zyrex records in CISA KEV

No Zyrex vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Popup 1 record HIGH

Records

1 record in Popup · all components

TI-2023-00875 CVE-2023-0924 · GHSA-9q4q-2728-w948

Zyrex Popup <= 1.0 - Admin+ Arbitrary File Upload

HIGH 67

The ZYREX POPUP WordPress plugin through 1.0 does not validate the type of files uploaded when creating a popup, allowing a high privileged user (such as an Administrator) to upload arbitrary files, even when modifying t…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00962 Published 2023-05-02 No fix listed CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0