Threat Database

Threat Entry Updated 2026-10-30

Zippy - Security Vulnerability (CVE-2026-116865)

Editor PHP Object Injection in Zippy

PLUGIN Zippy

CVE-2026-116865

HIGH CVSS 7.2 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Zippy - Arbitrary File Upload (CVE-2025-52758)

Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy zippy allows Using Malicious Files.This issue affects Zippy: from n/a through

PLUGIN Zippy

CVE-2025-52758

CRITICAL CVSS 9.1 2025-10-22

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Zippy - Broken Access Control (CVE-2023-34381)

Missing Authorization vulnerability in Gesundheit Bewegt GmbH Zippy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zippy: from n/a through 1.6.2.

PLUGIN Zippy

CVE-2023-34381

MEDIUM CVSS 5.3 2024-12-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Zippy - Arbitrary File Upload (CVE-2024-27964)

Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.9.

PLUGIN Zippy

CVE-2024-27964

HIGH CVSS 8.8 2024-03-21

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Zippy - PHP Object Injection (CVE-2023-36381)

Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.5.

PLUGIN Zippy

CVE-2023-36381

MEDIUM CVSS 6.6 2023-12-28

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Zippy - Information Disclosure (CVE-2023-26533)

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.1.

PLUGIN Zippy

CVE-2023-26533

MEDIUM CVSS 6.5 2023-11-30

Risk Score

Open Full Technical Breakdown