Zoorum Comments

1 CVEs product

Monthly

CVE-2025-2163 MEDIUM This Month

The Zoorum Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF XSS Zoorum Comments PHP
NVD
CVSS 3.1
6.1
EPSS
0.1%
CVE-2025-2163
EPSS 0% CVSS 6.1
MEDIUM This Month

The Zoorum Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF XSS +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy