ZYREX POPUP vulnerabilities
We track 1 vulnerability in ZYREX POPUP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2023.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest ZYREX POPUP vulnerabilities
- 7.2 High severity
ZYREX POPUP: Unrestricted Upload of File with Dangerous Type
The ZYREX POPUP WordPress plugin through 1.0 does not validate the type of files uploaded when creating a popup, allowing a high privileged user (such as an Administrator) to upload arbitrary files, even when modifying the file system is disallowed, such as in