Zportals vulnerabilities
We track 1 vulnerability in Zportals products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Zportals vulnerabilities
- 8.1 High severity
zportals: Unrestricted Upload of File with Dangerous Type
The zportals WordPress plugin before 6.3.4 does not properly validate uploaded files, trusting the client-supplied content type and preserving the original file extension, allowing any authenticated user (Subscriber or higher) to upload arbitrary PHP files and