Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: zportals 6.4.2 Clear all filters
TI-2026-15100 CVE-2026-18365 · GHSA-xr35-jw5p-9pmm

Zportals < 6.4.2 - Subscriber+ User Email Disclosure

Priority LOW 20

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions, allowing users with a subscriber-level account to disclose the display name and email address of every…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00295 Published 2026-09-23 Fixed in 6.4.2 CWE-200
TI-2026-15099 CVE-2026-18364 · GHSA-xjx7-wqcv-9p5h

Zportals < 6.4.2 - Subscriber+ Arbitrary Plugin Settings Update

Priority LOW 20

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions, allowing users with a subscriber-level account to modify the zportals WordPress plugin before 6.4.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00254 Published 2026-09-23 Fixed in 6.4.2 CWE-862