← WordPress Vulnerabilities
WordPress security by component

Zapier for WordPress

Zapier for WordPress is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jun 20, 2025; the highest CVE/CNA score is 6.4.

Plugin slug: zapier

CVE-2025-50010: Zapier for WordPress: A security weakness

Zapier for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJun 20, 2025
Safe version guidanceSee mitigation notes
Safe version
Jun 20, 2025 CVE-2025-50010
Zapier for WordPress: A security weakness
Zapier for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVDPending
Mar 26, 2025 CVE-2024-13411
Zapier for: Server-side request forgery
Zapier for is affected by server-side request forgery. Exploitation requires at least subscriber-level access. The vulnerable server can be induced to make attacker-selected network requests.
See mitigation notes
CVE6.4
NVDPending