WPZita
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Z Companion | 2 | – | Apr 11, 2025 |
| Zita Elementor Site Library | 2 | – | Feb 19, 2026 |
| Zita Site Library for Elementor | 2 | – | Oct 16, 2024 |
Exploited and recent CVEs
- CVE-2026-25319 WordPress Zita Elementor Site Library plugin <= 1.6.6 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2025-2575 Z Companion <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.4%
- CVE-2025-30817 WordPress Z Companion plugin <= 1.0.13 - Broken Access Control vulnerability 0.5%
- CVE-2024-8921 Zita Elementor Site Library <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.4%
- CVE-2024-37420 WordPress Zita Elementor Site Library plugin <= 1.6.1 - Arbitrary Code Execution vulnerability 0.5%
- CVE-2024-3249 Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification 0.3%