Skip to content
OpenAdvisories

Vendor

Zoho Flow

4 known vulnerabilities.

Products

Zoho Flow 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-59568

    WordPress Zoho Flow Plugin <= 2.14.1 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Zoho Flow Zoho Flow zoho-flow allows Cross Site Request Forgery.This issue affects Zoho Flow: from n/a through <= 2.14.1.

    Zoho Flow Zoho Flow
  • Medium 4.3
    CVE-2025-31408

    WordPress Zoho Flow plugin <= 2.13.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Zoho Flow Zoho Flow zoho-flow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho Flow: from n/a through <= 2.13.3.

    Zoho Flow Zoho Flow