Lucene search
+L

3 matches found

CNNVD
CNNVD
•added 2026/10/29 12:00 a.m.•6 views

WordPress Zoho Flow deserialization injection vulnerability

WordPress Zoho Flow versions 2.14.5 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

9.8CVSS5.9AI score0.00313EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/01 1:06 p.m.•19 views

WordPress Zoho Flow plugin <= 2.13.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin Zoho Flow versions = 2.13.3...

4.3CVSS8.4AI score0.00252EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/09/26 12:00 a.m.•30 views

WordPress Zoho Flow for WordPress Plugin <=2.7.1 is vulnerable to SQL Injection

Software Zoho Flow for WordPress Type Plugin Vulnerable versions =2.7.1 Fixed in 2.8.1 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-47334 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 4159c647e493 Credits Trương Hữu Phúc truonghuuphuc Required...

7.6CVSS5.8AI score0.00418EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder