Zella Theme vulnerabilities
We track 1 vulnerability in Zella Theme products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Zella Theme vulnerabilities
- 9.8 Critical severity
Zella Theme: Unrestricted Upload of File with Dangerous Type
The Zella Theme WordPress theme before 2.6.3 does not perform any capability or nonce check on one of its font upload actions, which is available to unauthenticated users, allowing them to upload arbitrary files, including PHP ones, and achieve remote code exe