CVE-2025-52758criticalCWE-434

CVE-2025-52758: falha crítica em Gesundheit Bewegt GmbH Zippy

WordPress Zippy plugin <= 1.7.0 - Arbitrary File Upload vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Zippy

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.1epss 0.5%
Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy zippy allows Using Malicious Files.This issue affects Zippy: from n/a through <= 1.7.0.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Gesundheit Bewegt GmbH · Zippy
CVEs relacionadas — Gesundheit Bewegt GmbH Zippy

No mesmo produto, das mais perigosas para as menos.

CVE-2023-26533MEDIUMWordPress Zippy Plugin <= 1.6.1 is vulnerable to Sensitive Data ExposureEPSS 0.7%CVE-2024-27964HIGHWordPress Zippy plugin <= 1.6.9 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2023-34381MEDIUMWordPress Zippy plugin <= 1.6.2 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2023-36381MEDIUMWordPress Zippy Plugin <= 1.6.5 is vulnerable to PHP Object InjectionEPSS 0.5%CVE-2026-116865HIGHWordPress Zippy plugin <= 1.7.0 - PHP Object Injection vulnerabilityEPSS 0.3%