Zora: community verdicts

1 notable / known-exploited Zora CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Zora CVE, see NVD ↗.

CVE-2026-30285CRIT 9.8Real · low riskEPSS 1%
An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.