Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Katie Seaborn Component: Zotpress Clear all filters
TI-2024-06885 CVE-2024-7429 · GHSA-39g2-28q4-qh2q

Zotpress <= 7.3.12 - Missing Authorization

Priority LOW 20

The Zotpress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Zotpress_process_accounts_AJAX function in all versions up to, and including, 7.3.12.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00363 Published 2024-11-05 No fix listed CWE-284
TI-2024-20212 CVE-2024-30488 · GHSA-p2c5-vphq-jrxg

WordPress Zotpress plugin <= 7.3.7 - SQL Injection vulnerability

Priority MEDIUM 41

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Katie Zotpress zotpress.This issue affects Zotpress: from n/a through <= 7.3.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00594 Published 2024-03-29 No fix listed CWE-89