Skip to content
OpenAdvisories

Vendor

kseaborn

2 known vulnerabilities.

Products

Zotpress 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-4666

    ZotPress <= 7.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via 'nickname'

    The Zotpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nickname’ parameter in all versions up to, and including, 7.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attac…

    kseaborn Zotpress Web / CMS
  • Medium 4.3
    CVE-2024-7429

    Zotpress <= 7.3.12 - Missing Authorization

    The Zotpress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Zotpress_process_accounts_AJAX function in all versions up to, and including, 7.3.12. This makes it possible for authenticated attack…

    kseaborn Zotpress Web / CMS