WPZita Z Companion

• CVE-2025-2575 Medium 6.4 Z Companion <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.4%
• CVE-2025-30817 Medium 5.4 WordPress Z Companion plugin <= 1.0.13 - Broken Access Control vulnerability 0.5%