Administrator Z

Vulnerabilities 7Slug administrator-zLatest version 2026.05.03WordPress.org →

Minimum safe version

2025.03.30

Update to 2025.03.30 or later to address 5 fixable vulnerabilities

Latest available2026.05.03 ⚠ 2 vulnerabilities have no fix
High 8.8
2025-04-15< 2025.03.27

CVE-2025-26959

Medium 6.5 Unfixed
2025-04-04≤ 2026.04.05

WordPress Administrator Z plugin <= 2026.03.02 - Cross Site Scripting (XSS) vulnerability

Medium 4.3 Unfixed
2025-04-04≤ 2026.04.05

WordPress Administrator Z plugin <= 2026.03.02 - Cross Site Request Forgery (CSRF) vulnerability

High 8.8
2025-03-28< 2025.03.27

WordPress Administrator Z Plugin <= 2025.03.24 is vulnerable to Broken Access Control

N/A
2022-11-02< 2022.9.29

Administrator Z <= 2022.9.28 - Unauthorized File Upload via ACF