Skip to content
OpenAdvisories

Vendor

wpzita

6 known vulnerabilities.

Products

Zita Elementor Site Library 2 Z Companion 2 Zita Site Library for Elementor 2
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-25319

    WordPress Zita Elementor Site Library plugin <= 1.6.6 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wpzita Zita Elementor Site Library zita-site-library allows Cross Site Request Forgery.This issue affects Zita Elementor Site Library: from n/a through <= 1.6.6.

    wpzita Zita Elementor Site Library
  • Medium 6.4
    CVE-2025-2575

    Z Companion <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Z Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, …

    wpzita Z Companion Web / CMS
  • Medium 5.4
    CVE-2025-30817

    WordPress Z Companion plugin <= 1.0.13 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wpzita Z Companion z-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Z Companion: from n/a through <= 1.0.13.

    wpzita Z Companion
  • Medium 6.4
    CVE-2024-8921

    Zita Elementor Site Library <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Zita Elementor Site Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authentic…

    wpzita Zita Site Library for Elementor Web / CMS
  • Medium 4.3
    CVE-2024-3249

    Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification

    The Zita Elementor Site Library plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the import_xml_data, xml_data_import, import_option_data, import_widgets, and import_customizer_settings functions in …

    wpzita Zita Site Library for Elementor Web / CMS