zotpress project vulnerabilities

Products

• zotpress 2

Latest zotpress project CVEs

Newest publication first

1. CVE-2023-32961 WordPress Zotpress Plugin <= 7.3.3 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-06-12

   Medium·CVSS 6.1 EPSS 1.0%

   Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.3 versions.

2. CVE-2016-1000217 Zotpress < 6.1.3 - SQL Injection

   Published 2016-10-06

   Critical·CVSS 9.8 EPSS 5.5%

   Zotpress plugin for WordPress SQLi in zp_get_account()

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.