Known security flaws left unpatched for months
The plugin has known security vulnerabilities that stay unpatched for months, with no reply to owners asking for a fix date.
Tier I · Proven The best-established problems.
6 public reports · first reported 19 April 2023 · last reported 9 July 2025
What's going wrong
Site owners using the Zapier for WordPress plugin report known security vulnerabilities that remain unpatched for a long stretch. Security scanners and vulnerability databases flag broken access control and missing authorization, and reporters ask for a fix date with no reply. Agencies that run the plugin across many client sites say they cannot keep it installed without risk. They need a way to reduce exposure while waiting, such as a monitored mitigation plan or a managed replacement path. A vulnerability watch that tracks these flaws and recommends interim steps would serve those owners.
AI-assisted: written with the help of AI from the reports.
Products affected
Zapier for WordPress.
Related problems
Who has this problem
1 business found.
Unlock them at the top of this page — $19.
All sales are final — no refunds.
Each business's name, the address it published, and the page it was published on. Paid through Stripe; you get a private page to bookmark, with a CSV download.