ZF
Product
Zoho Flow
by Zoho Flow · last CVE Oct 29, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch

Add Zoho Flow to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-62131
New
9.8–Oct 29
WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability
Affected: through 2.14.5
CVE-2024-47334
7.6
0%
Oct 9
WordPress Zoho Flow for WordPress plugin <= 2.7.1 - SQL Injection vulnerability
Affected: through 2.7.1
CVE-2025-59568
4.3
0%
Sep 22
WordPress Zoho Flow Plugin <= 2.14.1 - Cross Site Request Forgery (CSRF) Vulnerability
Affected: through 2.14.1
CVE-2025-31408
4.3
0%
Apr 1
WordPress Zoho Flow plugin <= 2.13.3 - Broken Access Control vulnerability
Affected: through 2.13.3
Showing 4