Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2023-34381

Disclosure Date: December 13, 2024 (last updated December 18, 2024)
Missing Authorization vulnerability in Gesundheit Bewegt GmbH Zippy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zippy: from n/a through 1.6.2.
0
Attacker Value
Unknown

CVE-2024-27964

Disclosure Date: March 21, 2024 (last updated February 26, 2025)
Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.9.
Attacker Value
Unknown

CVE-2023-36381

Disclosure Date: December 28, 2023 (last updated February 25, 2025)
Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.5.
Attacker Value
Unknown

CVE-2023-26533

Disclosure Date: November 30, 2023 (last updated February 25, 2025)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.1.
Attacker Value
Unknown

CVE-2021-24802

Disclosure Date: November 17, 2021 (last updated February 23, 2025)
The Colorful Categories WordPress plugin before 2.0.15 does not enforce nonce checks which could allow attackers to make a logged in admin or editor change taxonomy colors via a CSRF attack