Skip to content
OpenAdvisories

Vendor

Zapier

2 known vulnerabilities.

Products

Zapier for WordPress 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-50010

    WordPress Zapier for WordPress plugin <= 1.5.2 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Zapier Zapier for WordPress zapier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zapier for WordPress: from n/a through <= 1.5.2.

    Zapier Zapier for WordPress Web / CMS
  • Medium 6.4
    CVE-2024-13411

    Zapier for WordPress <= 1.5.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via updated_user Function

    The Zapier for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5.1 via the updated_user() function. This makes it possible for authenticated attackers, with Subscriber-level access and above,…

    Zapier Zapier for WordPress Web / CMS