HOMEVULNERABILITIESVENDORSZingiri

ZingiriCVEs & Vulnerabilities

4 CVEs affecting Zingiri products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

4 CVEs→ All vendors

Most Affected Products

zingiri web shop 76forums 20theme tuner plugin 6
CVE-2012-4920MEDIUM

Directory traversal vulnerability in the zing_forum_output function in forum.php in the Zingiri Forum (aka Forums) plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter to index.php.

4 Apr 2014
5.0
CVSS
CVE-2012-6506MEDIUMpoc

Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php.

24 Jan 2013
4.3
CVSS
CVE-2012-4033CRITICAL

Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have unknown impact and attack vectors.

18 Jul 2012
10.0
CVSS
CVE-2012-0934HIGH

PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter.

29 Jan 2012
7.5
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database