Zoho

    Dashboard / Vendors

    Products: 6
    Vulnerabilities: 10
    Known Exploited: 9
    0
    Critical Level Threats
    4
    High Level Threats
    6
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-37225

    WordPress Zoho Marketing Automation plugin <= 1.2.7 - SQL Injection vulnerability

    Last Modified: Nov 21, 2024
    Published: Jul 09, 2024

    CVE-2024-32441

    WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability

    Last Modified: Apr 28, 2026
    Published: Apr 15, 2024

    CVE-2024-32442

    WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability

    Last Modified: Apr 28, 2026
    Published: Apr 15, 2024

    CVE-2021-42956

    Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dump all sensitive information including DB Connection string, entire IT infrastructure details, commands executed by IT admin including credentials, secrets, private keys and more.

    Last Modified: Nov 21, 2024
    Published: Nov 17, 2021

    CVE-2019-19306

    The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName.

    Last Modified: Nov 21, 2024
    Published: Nov 26, 2019
    Items Per Page