Zapier for WordPress

Zapier for WordPress has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include Server-Side Request Forgery (SSRF).

Every one of the 2 issues recorded for Zapier for WordPress has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Zapier for WordPress is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Zapier for WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-13411

Zapier for WordPress <= 1.5.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via updated_user Function

Read the full analysis

Vulnerability Records

2 records
Zapier for WordPress banner
Latestv1.5.3

Zapier for WordPress

Zapier

Author

Zapier

2.2(72)
44/100
Last Updated
2025-07-24 (1y ago)
Active Installs
50,000+
Downloads
706,335
Requires WP
5.5+
Requires PHP
7.4+
Tested up to
WP 6.5.10
Created
2020-05-22 (6y ago)

Zapier is the #1 workflow automation platform for small and midsize businesses that supports 7,000+ of the most popular apps, like Instagram, Facebook, and Pinterest. In just a few minutes, you can set up automated workflows (called Zaps) that connect WordPress with the other apps you use most. You can share your latest WordPress posts to Facebook or Instagram, create drafts from an RSS feed or Mailchimp newsletter, or be notified when you get new comments and much more–no manual work or coding required. Some things you can do with Zapier + WordPress Share your latest WordPress posts to your social media profiles, like Facebook, Instagram, and Pinterest Create WordPress posts automatically based on your newsletters or RSS feeds Add new WordPress users to your email marketing campaigns Get notified in Slack or Microsoft Teams when new comments are left on your posts How to get started Sign up for Zapier. (Zapier has a free forever plan. Paid plans scale with usage.) Check out Zapier’s Getting Started Guide. Install the plugin, then head to https://zapier.com/apps/wordpress to get started. What people are saying about Zapier “I would go as far to say that it has increased my personal efficiency by more than 400 percent.”—Garrett Grohman, Indiegogo “Zapier helps us to work faster and smarter by removing manual processes. We can now focus on adding a personal touch to our work.”—Olivia Jardine, Meister “Zapier probably saves me about 10 hours a week, when it comes to running our design operations. If I tap into my math skills, I do believe it’s 25 percent more productive!”—Lindsey Redinger, InVision What people are connecting with Zapier WordPress to Calendly Zoom to WordPress WordPress to Mongodb Pipedrive to WordPress Teachable to WordPress Get Help If you have any feature requests, issues, or questions with Zapier for WordPress, please contact us using our help form.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C