Zota - Elementor Multi-Purpose WooCommerce Theme

Zota - Elementor Multi-Purpose WooCommerce Theme has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 8.5, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is PHP Remote File Inclusion, behind 3 of the records (100%).

Every one of the 3 issues recorded for Zota - Elementor Multi-Purpose WooCommerce Theme has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by João Pedro Soares de Alcântara.

Strategic Overview

Avg CVSSHigh

8.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Zota - Elementor Multi-Purpose WooCommerce Theme vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-49257

Zota <= 1.3.8 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

3 records


2026-02-11 00:00	Zota <= 1.3.14 - Unauthenticated Local File Inclusion Zota - Elementor Multi-Purpose… <= 1.3.14	`CVE-2025-68536`	8.1 High	João Pedro Soares de Alcântara	Yes
2025-12-27 00:00	Zota <= 1.3.14 - Authenticated (Contributor+) Local File Inclusion Zota - Elementor Multi-Purpose… <= 1.3.14	`CVE-2025-68537`	7.5 High	João Pedro Soares de Alcântara	Yes
2025-06-11 00:00	Zota <= 1.3.8 - Unauthenticated Local File Inclusion Zota - Elementor Multi-Purpose… <= 1.3.8	`CVE-2025-49257`	9.8 Critical	Phat RiO	Yes

Showing 1–3 of 3 reports