CVE-2026-30285
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Zora: Post, Trade, Earn Crypto version v2.60.0 contains an arbitrary file overwrite vulnerability during the file import process. An attacker can overwrite critical internal files, potentially leading to arbitrary code execution or information exposure.
Risk Assessment
An attacker could gain control of the system by overwriting critical files, potentially resulting in arbitrary code execution or leakage of sensitive data.
Recommendation
Contact the vendor for an update or apply workarounds to secure the file import process.
Original NVD description (English source)
An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.