Zotpress Project Zotpress — known CVE vulnerabilities

Every CVE whose affected-product data names Zotpress Project Zotpress, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2016-1000217 — CVSS 9.8 (critical): Zotpress plugin for WordPress SQLi in zp_get_account()
• CVE-2023-32961 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.3 versions.