Zoho Flow

Products

ProductCVEsExploitedLatest
Zoho Flow4–Oct 29, 2026

Exploited and recent CVEs

  • CVE-2026-62131 Critical 9.8 WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability 0.3%
  • CVE-2025-59568 Medium 4.3 WordPress Zoho Flow Plugin <= 2.14.1 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-31408 Medium 4.3 WordPress Zoho Flow plugin <= 2.13.3 - Broken Access Control vulnerability 0.3%
  • CVE-2024-47334 High 7.6 WordPress Zoho Flow for WordPress plugin <= 2.7.1 - SQL Injection vulnerability 0.4%