Advisories · Technology

Gesundheit Bewegt GmbH Zippy.

Every CVE that names Gesundheit Bewegt GmbH Zippy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116865 CVE record

CVSS 7.2 High

WordPress Zippy plugin <= 1.7.0 - PHP Object Injection vulnerability
- Gesundheit Bewegt GmbH Zippy
- Insecure deserialization
Not analysed yet 29 Oct 2026
CVE-2025-52758 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Zippy plugin <= 1.7.0 - Arbitrary File Upload vulnerability
- Gesundheit Bewegt GmbH Zippy
- Unrestricted file upload
Not analysed yet 22 Oct 2025
CVE-2023-34381 CVE record

CVSS 5.3 Medium

WordPress Zippy plugin <= 1.6.2 - Broken Access Control vulnerability
- Gesundheit Bewegt GmbH Zippy
- Broken access control
Not analysed yet 13 Dec 2024
CVE-2024-27964 CVE record

CVSS 8.8 High

WordPress Zippy plugin <= 1.6.9 - Arbitrary File Upload vulnerability
- Gesundheit Bewegt GmbH Zippy
- Unrestricted file upload
Not analysed yet 21 Mar 2024
CVE-2023-36381 CVE record

CVSS 6.6 Medium

WordPress Zippy Plugin <= 1.6.5 is vulnerable to PHP Object Injection
- Gesundheit Bewegt GmbH Zippy
- Insecure deserialization
Not analysed yet 28 Dec 2023
CVE-2023-26533 CVE record

CVSS 6.5 Medium

WordPress Zippy Plugin <= 1.6.1 is vulnerable to Sensitive Data Exposure
- Gesundheit Bewegt GmbH Zippy
- Information disclosure
Not analysed yet 30 Nov 2023