Tripzzy vulnerabilities
We track 1 vulnerability in Tripzzy products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 20, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Tripzzy vulnerabilities
- 7.5 High severity
Tripzzy: Improper Access Control
The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of the object being removed, in an AJAX action available to unauthenticated users, allowing them to permanently delete arbitrary comments on the