Vulnerabilities

TI-2026-69424 CVE-2026-27420 · GHSA-pp74-mvwm-6jfv

Stored cross-site scripting in WordPress Zotpress plugin

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Katie Seaborn Zotpress zotpress allows Stored XSS.This issue affects Zotpress: from n/a through 7.4.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00127 Published 2026-10-08 No fix listed CWE-79

TI-2024-06885 CVE-2024-7429 · GHSA-39g2-28q4-qh2q

Zotpress <= 7.3.12 - Missing Authorization

LOW 20

The Zotpress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Zotpress_process_accounts_AJAX function in all versions up to, and including, 7.3.12.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00363 Published 2024-11-05 No fix listed CWE-284

TI-2024-20212 CVE-2024-30488 · GHSA-p2c5-vphq-jrxg

WordPress Zotpress plugin <= 7.3.7 - SQL Injection vulnerability

MEDIUM 41

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Katie Zotpress zotpress.This issue affects Zotpress: from n/a through <= 7.3.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00594 Published 2024-03-29 No fix listed CWE-89

TI-2023-24927 CVE-2023-46313 · GHSA-7hrj-c89x-75w7

WordPress Zotpress Plugin <= 7.3.4 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.4 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00406 Published 2023-10-31 No fix listed CWE-79

TI-2023-16149 CVE-2023-32961 · GHSA-f3h8-vq7h-x3vm

WordPress Zotpress Plugin <= 7.3.3 is vulnerable to Cross Site Scripting (XSS)

LOW 33

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.3 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0103 Published 2023-06-12 No fix listed CWE-79