Wpzita

6 CVEs across 4 Wpzita products. Browse Wpzita vulnerabilities, severities, and proof-of-concept exploits.

Wpzita products with known CVEs

ProductCVEs
Z Companion2
Zita Elementor Site Library2
Zita Site Library For Elementor2
Z Companion1
Wpzita CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25319Medium4.32026-02-19Cross-Site Request Forgery (CSRF) vulnerability in wpzita Zita Elementor Site Library zita-site-library allows Cross Site Request Forgery.This issue affects Zi…
CVE-2025-2575Medium6.42025-04-11The Z Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.1 due to insuf…
CVE-2025-30817Medium5.42025-03-27Missing Authorization vulnerability in wpzita Z Companion z-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…
CVE-2024-8921Medium6.42024-10-16The Zita Elementor Site Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1…
CVE-2024-37420Critical9.92024-07-09Unrestricted Upload of File with Dangerous Type vulnerability in WPZita Zita Elementor Site Library allows Upload a Web Shell to a Web Server.This issue affect…
CVE-2024-3249Medium4.32024-06-25The Zita Elementor Site Library plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the import_xml_dat…