Vulnerabilities in WPZita
6 resultsCVE-2024-37420CRITICALWordPress Zita Elementor Site Library plugin <= 1.6.1 - Arbitrary Code Execution vulnerabilityEPSS 0.5%CVE-2025-30817MEDIUMWordPress Z Companion plugin <= 1.0.13 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-8921MEDIUMZita Elementor Site Library <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.4%CVE-2024-3249MEDIUMZita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options ModificationEPSS 0.3%CVE-2025-2575MEDIUMZ Companion <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.3%CVE-2026-25319MEDIUMWordPress Zita Elementor Site Library plugin <= 1.6.6 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%