zozothemes vulnerabilities and threats

15 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.9	EPSS 0.5%	CVE-2026-27419Zegen (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.5%2026-07-02CVE Database V5CVE-2026-27419 Subscriber Arbitrary File Upload in Zegen <= 1.1.9 versions. EPSS 0.5%Vulnerability Zozothemes CWE-434	CVE Database V5	2026-07-02
Medium	6.5	EPSS 0.4%	CVE-2025-69132Corpkit (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2026-07-02CVE Database V5CVE-2025-69132 Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions. EPSS 0.4%Vulnerability Zozothemes CWE-201	CVE Database V5	2026-07-02
Critical	9.9	EPSS 0.5%	CVE-2026-22327Restaurt (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.5%2026-06-17CVE Database V5CVE-2026-22327 Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions. EPSS 0.5%Vulnerability Zozothemes CWE-434	CVE Database V5	2026-06-17
Critical	9.9	EPSS 0.4%	CVE-2026-24960Charety (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.4%2026-03-05CVE Database V5CVE-2026-24960 Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through < 2.0.2. EPSS 0.4%Vulnerability zozothemes	CVE Database V5	2026-03-05
Critical	9.9	EPSS 0.5%	CVE-2025-68555Nutrie (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.5%2026-03-05CVE Database V5CVE-2025-68555 Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Nutrie nutrie allows Upload a Web Shell to a Web Server.This issue affects Nutrie: from n/a through < 2.0.1. EPSS 0.5%Vulnerability zozothemes	CVE Database V5	2026-03-05
Critical	9.9	EPSS 0.5%	CVE-2025-68554Keenarch (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.5%2026-03-05CVE Database V5CVE-2025-68554 Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Keenarch keenarch allows Using Malicious Files.This issue affects Keenarch: from n/a through < 2.0.1. EPSS 0.5%Vulnerability zozothemes	CVE Database V5	2026-03-05
Critical	9.9	EPSS 0.5%	CVE-2025-68553Lendiz (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.5%2026-03-05CVE Database V5CVE-2025-68553 Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Lendiz lendiz allows Upload a Web Shell to a Web Server.This issue affects Lendiz: from n/a through < 2.0.1. EPSS 0.5%Vulnerability zozothemes	CVE Database V5	2026-03-05
Critical	9.9	EPSS 0.5%	CVE-2025-68549Wiguard (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.5%2026-02-20CVE Database V5CVE-2025-68549 Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Wiguard wiguard allows Upload a Web Shell to a Web Server.This issue affects Wiguard: from n/a through < 2.0.1. EPSS 0.5%Vulnerability zozothemes	CVE Database V5	2026-02-20
Critical	9.9	EPSS 0.5%	CVE-2025-68986Miion (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.5%2026-01-22CVE Database V5CVE-2025-68986 Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Miion miion allows Upload a Web Shell to a Web Server.This issue affects Miion: from n/a through <= 1.2.7. EPSS 0.5%Vulnerability zozothemes	CVE Database V5	2026-01-22
High	7.5	EPSS 0.6%	CVE-2025-68913Miion (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.6%2026-01-22CVE Database V5CVE-2025-68913 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Miion miion allows PHP Local File Inclusion.This issue affects Miion: from n/a through <= 1.2.7. EPSS 0.6%Vulnerability zozothemes	CVE Database V5	2026-01-22
High	7.5	EPSS 0.5%	CVE-2025-67925Corpkit (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.5%2026-01-08CVE Database V5CVE-2025-67925 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Corpkit corpkit allows PHP Local File Inclusion.This issue affects Corpkit: from n/a through <= 2.0. EPSS 0.5%Vulnerability zozothemes	CVE Database V5	2026-01-08
Critical	9.9	EPSS 0.4%	CVE-2025-67924Corpkit (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.4%2026-01-08CVE Database V5CVE-2025-67924 Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Corpkit corpkit allows Upload a Web Shell to a Web Server.This issue affects Corpkit: from n/a through <= 2.0. EPSS 0.4%Vulnerability zozothemes	CVE Database V5	2026-01-08
High	8.8	EPSS 0.3%	CVE-2025-11087Zegen Core (WordPress plugin) · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2025-11-21CVE Database V5CVE-2025-11087 The Zegen Core plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 2.0.1. This is due to missing nonce validation and missing file type validation in the '/custom-font-code/custom-fonts-uploads.php' file. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. EPSS 0.3%Vulnerability zozothemes CWE-352	CVE Database V5	2025-11-21
High	7.5	EPSS 0.5%	CVE-2025-53252Zegen (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.5%2025-11-06CVE Database V5CVE-2025-53252 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Zegen zegen allows PHP Local File Inclusion.This issue affects Zegen: from n/a through <= 1.1.9. EPSS 0.5%Vulnerability zozothemes CWE-98	CVE Database V5	2025-11-06
Medium	4.3	EPSS 0.3%	CVE-2025-2289Zegen (WordPress theme) · Missing Authorization Medium4.3EPSS 0.3%2025-03-14CVE Database V5CVE-2025-2289 The Zegen - Church WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX endpoints in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import, export, and update theme options. EPSS 0.3%Vulnerability zozothemes CWE-862	CVE Database V5	2025-03-14

Page 1 of 1