Kseaborn Zotpress
2 CVEs affecting Kseaborn Zotpress. Latest disclosed: 2025-06-11. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4666 | Medium | 6.4 | 2025-06-11 | The Zotpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nickname’ parameter in all versions up to, and including, 7.3.15 due to… |
CVE-2024-7429 | Medium | 4.3 | 2024-11-05 | The Zotpress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Zotpress_process_accounts_AJAX fu… |