Approved changes feed: RSS · Atom

cpe:2.3:a:gesundheit_bewegt_gmbh:zippy:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGesundheit Bewegt Gmbh (a9372191-1b0e-51d8-86a1-c7df7b9d35e4)
ProductZippy (ff7f2c59-ff7c-5e03-8ca2-09e976664203)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-116865 vulnerable 2026-11-03 10:15:21.989943 WordPress Zippy plugin <= 1.7.0 - PHP Object Injection vulnerability
HIGH (7.2)
Editor PHP Object Injection in Zippy <= 1.7.0 versions.
Published: 2026-10-29T15:24:29.022Z
Updated: 2026-10-30T18:50:00.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52758 vulnerable 2026-06-08 07:31:12.927241 WordPress Zippy plugin <= 1.7.0 - Arbitrary File Upload vulnerability
CRITICAL (9.1)
Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy zippy allows Using Malicious Files.This issue affects Zippy: from n/a through <= 1.7.0.
Published: 2025-10-22T14:32:27.961Z
Updated: 2026-04-28T16:13:18.266Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27964 vulnerable 2026-06-08 06:33:25.171413 WordPress Zippy plugin <= 1.6.9 - Arbitrary File Upload vulnerability
HIGH (8.8)
Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.9.
Published: 2024-03-21T16:43:38.076Z
Updated: 2026-04-28T16:09:14.708Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36381 vulnerable 2026-06-08 06:08:11.234015 WordPress Zippy Plugin <= 1.6.5 is vulnerable to PHP Object Injection
MEDIUM (6.6)
Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.5.
Published: 2023-12-28T10:34:46.565Z
Updated: 2026-04-28T16:08:30.281Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34381 vulnerable 2026-06-08 06:06:25.401059 WordPress Zippy plugin <= 1.6.2 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Gesundheit Bewegt GmbH Zippy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zippy: from n/a through 1.6.2.
Published: 2024-12-13T14:23:37.245Z
Updated: 2026-04-28T16:08:28.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26533 vulnerable 2026-06-08 05:57:39.902418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.