All 6 CVE vulnerabilities found in Administrator Z, with AI-generated Chinese analysis, references, and POCs.
Vendor: Quý Lê 91
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-39598 | WordPress Administrator Z plugin <= 2025.03.28 - Directory Traversal Vulnerability CWE-35 | 4.9 | Medium | 2025-04-16 |
| CVE-2025-26959 | WordPress Administrator Z <= 2025.03.24 - Privilege Escalation Vulnerability CWE-862 | 8.8 | High | 2025-04-15 |
| CVE-2025-32276 | WordPress Administrator Z plugin <= 2026.04.05 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 | 4.3 | Medium | 2025-04-04 |
| CVE-2025-32187 | WordPress Administrator Z plugin <= 2026.04.05 - Cross Site Scripting (XSS) vulnerability CWE-79 | 6.5 | Medium | 2025-04-04 |
| CVE-2025-2815 | Administrator Z <= 2025.03.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update CWE-862 | 8.8 | High | 2025-03-28 |
| CVE-2024-50524 | WordPress Administrator Z plugin < 2024.10.21 - SQL Injection vulnerability CWE-89 | 8.5 | High | 2024-11-09 |
All 6 known CVE vulnerabilities affecting Administrator Z with full Chinese analysis, references, and POCs where available.