Vulnerabilities

TI-2024-18567 CVE-2024-27964 · GHSA-v7mx-cxcx-v2fh

WordPress Zippy plugin <= 1.6.9 - Arbitrary File Upload vulnerability

MEDIUM 41

Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00606 Published 2024-03-21 No fix listed CWE-434

TI-2023-18244 CVE-2023-36381 · GHSA-w264-jx82-7g7r

WordPress Zippy Plugin <= 1.6.5 is vulnerable to PHP Object Injection

LOW 39

Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00478 Published 2023-12-28 No fix listed CWE-502

TI-2023-11670 CVE-2023-26533 · GHSA-3cg5-6rj7-9c9c

WordPress Zippy Plugin <= 1.6.1 is vulnerable to Sensitive Data Exposure

LOW 30

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00724 Published 2023-11-30 No fix listed CWE-200

Vulnerabilities

Filters

WordPress Zippy plugin <= 1.6.9 - Arbitrary File Upload vulnerability

WordPress Zippy Plugin <= 1.6.5 is vulnerable to PHP Object Injection

WordPress Zippy Plugin <= 1.6.1 is vulnerable to Sensitive Data Exposure