Z Companion

Z Companion

z-companion
WordPress Plugin DirectoryWordPress Plugin Directory
WordPress Pluginwordpress.org
wpzita.comwpzita.com
Releases5
Frequency9 months 2 weeks
Last Release
Downloads19.2K

Z-Companion plugin is specially made for wpzita themes.This plugin boost up features in the theme.

Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-2575↗
6.4 MEDIUM—

The Z Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Note: This requires Royal Shop theme to be installed.