https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T17:36:27.004756+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2025-11701 fkie_cve-2025-11701 2026-10-04T17:36:27.048956+00:00

The Zip Attachments plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check as well as missing post status validation in the za_create_zip_callback function in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers to download attachments from private and password-protected posts.

 https://vulnerability.circl.lu/vuln/ghsa-f244-gm76-qc53 GHSA-f244-gm76-qc53 2026-10-04T17:36:27.049067+00:00

The Zip Attachments plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check as well as missing post status validation in the za_create_zip_callback function in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers to download attachments from private and password-protected posts.