Approved changes feed: RSS · Atom
cpe:2.3:a:zoho_flow:zoho_flow:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Zoho Flow (0dd59a3d-1e0b-57de-aed1-9d6da3392212) |
|---|---|
| Product | Zoho Flow (708d551c-ea3e-5a4e-9316-773c7a768e56) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-62131 |
vulnerable | 2026-11-03 10:15:49.902243 |
WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability
CRITICAL (9.8)
Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.
Published: 2026-10-29T15:24:26.750Z
Updated: 2026-10-30T18:50:01.303Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59568 |
vulnerable | 2026-06-08 07:35:22.358410 |
WordPress Zoho Flow Plugin <= 2.14.1 - Cross Site Request Forgery (CSRF) Vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Zoho Flow Zoho Flow zoho-flow allows Cross Site Request Forgery.This issue affects Zoho Flow: from n/a through <= 2.14.1.
Published: 2025-09-22T18:25:59.396Z
Updated: 2026-04-28T16:13:52.743Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31408 |
vulnerable | 2026-06-08 07:17:02.965742 |
WordPress Zoho Flow plugin <= 2.13.3 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in Zoho Flow Zoho Flow zoho-flow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho Flow: from n/a through <= 2.13.3.
Published: 2025-04-01T13:07:54.459Z
Updated: 2026-04-28T16:12:06.042Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47334 |
vulnerable | 2026-06-08 06:48:11.798584 |
WordPress Zoho Flow for WordPress plugin <= 2.7.1 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Flow Zoho Flow zoho-flow allows SQL Injection.This issue affects Zoho Flow: from n/a through <= 2.7.1.
Published: 2024-10-09T10:42:32.939Z
Updated: 2026-05-11T21:09:17.020Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.