Skip to content
OpenAdvisories

Product · quicoto

Zip Attachments

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-11701

    Zip Attachments <= 1.6 - Missing Authorization to Unauthenticated Private And Password-Protected Posts Attachment Disclosure

    The Zip Attachments plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check as well as missing post status validation in the za_create_zip_callback function in all versions up to, and including, 1.6. This makes it p…

    quicoto Zip Attachments Web / CMS
  • Medium 5.3
    CVE-2025-11692

    Zip Attachments <= 1.6 - Missing Authorization to Limited File Deletion

    The Zip Attachments plugin for WordPress is vulnerable to unauthorized loss of data due to a missing authorization and capability checks on the download.php file in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers t…

    quicoto Zip Attachments Web / CMS