Zotpress vulnerabilities

Plugin slug zotpress · 9 known vulnerabilities · latest disclosed 2026-10-08 · WordPress.org page

Every listed vulnerability has a fix. Version 7.4.5 or later is not affected by any of them. If your site runs an older version, update it.

2 of 9 rated high or critical (CVSS 7 or more).

Known vulnerabilities in Zotpress

SeverityAffected versionsFixed inCVEPublishedDetails
Medium 6.4<= 7.4.47.4.5CVE-2026-274202026-10-08Advisory
Medium 6.4<= 7.3.157.4CVE-2025-46662025-06-10Advisory
Medium 4.3<= 7.3.127.3.13CVE-2024-74292024-11-04Advisory
Medium 6.4<= 7.3.107.3.11CVE-2024-476212024-09-30Advisory
Medium 6.4<= 7.3.97.3.10CVE-2024-345692024-05-07Advisory
Critical 9.9<= 7.3.77.3.8CVE-2024-304882024-03-28Advisory
Medium 6.1<= 7.3.47.3.5CVE-2023-463132023-09-10Advisory
Medium 5.4<= 7.3.37.3.4CVE-2023-329612023-05-16Advisory
Critical 9.8< 6.1.36.1.3CVE-2016-10002172016-10-06Advisory

Check if a site is affected

Enter a site address to see which version of Zotpress and other plugins it runs, and whether they match a known vulnerability.

Questions

Is the Zotpress plugin safe to use?

All 9 known issues are fixed in current versions (7.4.5 or later). Keeping it updated is what matters.

How do I check which version of Zotpress my site runs?

In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.

How do I fix a vulnerable plugin?

Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.

Check any WordPress site in one click while you browse: Add PluginPeek to Chrome