Oliverfriedmann Ziggeo vulnerabilities

• oliverfriedmann ziggeo Ziggeo <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via 'ziggeo_ajax' AJAX Action CVE-2026-4124 5.4 MediumApril 9, 2026
• oliverfriedmann ziggeo Ziggeo <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12452 6.4 MediumFebruary 21, 2025