Gesundheit Bewegt GmbH vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.2		CVE-2026-116865Zippy (WordPress plugin) · Deserialization of Untrusted Data High7.22026-10-29CVE Database V5CVE-2026-116865 CVE-2026-116865 is a high-severity vulnerability in Gesundheit Bewegt GmbH's Zippy product, affecting versions up to and including 1.7.0. It involves PHP object injection due to deserialization of untrusted data, which can lead to complete compromise of confidentiality, integrity, and availability. Vulnerability Gesundheit Bewegt CWE-502	CVE Database V5	2026-10-29
Critical	9.1	EPSS 0.5%	CVE-2025-52758Zippy (WordPress plugin) · Unrestricted File Upload Critical9.1EPSS 0.5%2025-10-22CVE Database V5CVE-2025-52758 Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy zippy allows Using Malicious Files.This issue affects Zippy: from n/a through <= 1.7.0. EPSS 0.5%Vulnerability Gesundheit Bewegt	CVE Database V5	2025-10-22
High	8.8	EPSS 0.6%	CVE-2024-27964Zippy (WordPress plugin) · Unrestricted File Upload High8.8EPSS 0.6%2024-03-21CVE Database V5CVE-2024-27964 Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.9. EPSS 0.6%Vulnerability Gesundheit Bewegt CWE-434	CVE Database V5	2024-03-21

Page 1 of 1