Zoho Mail
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Zoho ZeptoMail | 2 | – | Feb 20, 2026 |
Exploited and recent CVEs
- CVE-2025-67972 WordPress Zoho ZeptoMail plugin <= 3.2.9 - Broken Access Control vulnerability 0.4%
- CVE-2025-49028 WordPress Zoho ZeptoMail plugin <= 3.3.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability 0.1%