zapier
Security Risk Profile
36
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 21, 2022 to present
5
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
36/100
low
Severity Distribution
Critical
1High
0Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
SSRF
1
Most Affected Products
1. Zapier Zapier2
2. ENS Domains ENS Domains2
3. PostHog PostHog2
4. Postman Postman2
5. Zapier Zapier for WordPress2
Recent Vulnerabilities
See more →https://www.bleepingcomputer.com/news/security/shai-hulud-malware-infects-500-npm-packages-leaks-secrets-on-github/
unknown
Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub
11/24/2025🔧 No Patch
https://www.theregister.com/2025/11/24/shai_hulud_npm_worm/
unknown
Shai-Hulud worm returns, belches secrets to 25K GitHub repos
11/24/2025🔧 No Patch
CVE-2025-50010
CVSS 5.4medium
WordPress Zapier for WordPress plugin <= 1.5.2 - Broken Access Control Vulnerability
6/20/2025🔧 No Patch
CVE-2024-13411
CVSS 6.4medium
Zapier for WordPress <= 1.5.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via updated_user Function
3/26/2025🔧 No Patch
CVE-2022-28802
CVSS 9.9critical
9/21/2022🔧 No Patch
Monitor zapier in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.