WPZita

Products

ProductCVEsExploitedLatest
Z Companion2–Apr 11, 2025
Zita Elementor Site Library2–Feb 19, 2026
Zita Site Library for Elementor2–Oct 16, 2024

Exploited and recent CVEs

  • CVE-2026-25319 Medium 4.3 WordPress Zita Elementor Site Library plugin <= 1.6.6 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-2575 Medium 6.4 Z Companion <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.4%
  • CVE-2025-30817 Medium 5.4 WordPress Z Companion plugin <= 1.0.13 - Broken Access Control vulnerability 0.5%
  • CVE-2024-8921 Medium 6.4 Zita Elementor Site Library <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.4%
  • CVE-2024-37420 Critical 9.9 WordPress Zita Elementor Site Library plugin <= 1.6.1 - Arbitrary Code Execution vulnerability 0.5%
  • CVE-2024-3249 Medium 4.3 Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification 0.3%