Zinoui vulnerabilities
We track 1 vulnerability in Zinoui products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 22, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Zinoui vulnerabilities
- 7.2 High severity
HTTP Headers: External Control of File Name or Path
The HTTP Headers plugin for WordPress is vulnerable to External Control of File Name or Path leading to Remote Code Execution in all versions up to and including 1.19.2. This is due to insufficient validation of the file path stored in the 'hh_htpasswd_path' o