Zoho Marketing Automation

Zoho Marketing Automation has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 9.9, and the most serious one scores 9.9 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is SQL Injection, behind 1 of the records (100%).

The one issue recorded for Zoho Marketing Automation has a vendor fix available, so running the current release closes it.

All of these findings were reported by LVT-tholv2k. Zoho Marketing Automation is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSCritical
9.9/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Zoho Marketing Automation vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.9CVE-2024-37225

Zoho Marketing Automation <= 1.2.7 - Authenticated (Contributor+) SQL Injection

Read the full analysis

Vulnerability Records

1 records
Zoho Marketing Automation banner
Latestv1.3.8

Zoho Marketing Automation

Zoho Campaigns

Author

Zoho Campaigns

0.0(0)
0/100
Last Updated
2026-09-10 (3d ago)
Active Installs
1,000+
Downloads
31,852
Requires WP
5.1.1+
Requires PHP
5.2.4+
Tested up to
WP 6.9.7
Created
2019-05-04 (8y ago)

Zoho Marketing Automation is an all-in-one marketing automation software that helps you successfully manage your marketing activities across multiple channels. It allows you to generate, nurture, and qualify more leads into customers while also retaining them as loyal customers. Using the Zoho Marketing Automation plugin, you can analyze your website visitors’ behavior and activities, convert them into leads by embedding signup forms on your web pages, and utilize the new eCommerce integration to monitor shopping activities and boost conversions. With the Zoho Marketing Automation plugin, you can add: Web Assistant Analyze your website visitors’ actions, the pages they navigate, and the topics that interest them. Our behavior tracking tool helps you set up events for different actions on your web pages and set goals for your visitors to perform. Based on whether your visitors achieve or miss these goals, you can build personalized journeys that engage them, and help them convert into customers. Choose whether you want to track all the pages on your site, only specific pages, or pages of specific categories. Using a &#8216;date’ option, you can choose to track the pages created after a selected date. Signup Forms Embed signup forms to your WordPress site and entice your web visitors to sign up for your content. Once they sign up, they’re automatically added as leads in the respective mailing lists inside your Marketing Automation account. You can fetch these signup forms from your Marketing Automation account and embed them on your site using short codes. Instantly show or hide a signup form on your site through a control within WordPress. eCommerce Seamlessly transfer your WooCommerce store data to Marketing Automation 2.0 with simple integration methods. Start sending targeted emails, automate your ecommerce activities and personalize your marketing efforts with the help of MA 2.0 after you connect your WooCommerce store. Once the integration is complete, you can start utilizing the powerful features of MA 2.0 to boost your ecommerce activities and increase your sales. So why wait? Connect your store with MA 2.0 today and take your ecommerce game to the next level.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C