CVE-2025-11701 Zip Attachments <= 1.6 - Missing Authorization to Unauthenticated Private And Password-Protected Posts Attachment Disclosure

The Zip Attachments plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check as well as missing post status validation in the zacreatezipcallback function in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers to...

WordPress Zip Attachments plugin <= 1.6 - Missing Authorization to Unauthenticated Private And Password-Protected Posts Attachment Disclosure vulnerability

Missing Authorization to Unauthenticated Private And Password-Protected Posts Attachment Disclosure vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Zip Attachments versions = 1.6...

EUVD-2021-11651

Malware in sbrugna...

EUVD-2021-11589

Malware in sbrugna...

EUVD-2021-11687

Malware in sbrugna...

EUVD-2021-11752

Malware in sbrugna...

EUVD-2021-11793

Malware in sbrugna...

EUVD-2011-0716

Malware in sbrugna...

EUVD-2021-11754

Malware in sbrugna...

EUVD-2024-47071

Malicious code in bioql PyPI...

EUVD-2025-31213

Malicious code in bioql PyPI...

EUVD-2024-32897

Malicious code in bioql PyPI...

EUVD-2024-33449

Malicious code in bioql PyPI...

EUVD-2024-48688

Malicious code in bioql PyPI...

EUVD-2024-33444

Malicious code in bioql PyPI...

EUVD-2025-15319

Malicious code in bioql PyPI...

EUVD-2025-5886

Malicious code in bioql PyPI...

EUVD-2024-16473

Malicious code in bioql PyPI...

EUVD-2024-33405

Malicious code in bioql PyPI...

EUVD-2023-53928

Malicious code in bioql PyPI...