Zegen Core vulnerabilities

1 known vulnerability in Zegen Core from Zozothemes. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Zegen Core: Cross-Site Request Forgery

  CVE-2025-11087Nov 21, 2025Zozothemes

  The Zegen Core plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 2.0.1. This is due to missing nonce validation and missing file type validation in the '/custom-font-code/custom-fonts-up