CVE-2026-30285 in Zora Post, Trade, Earn Cryptoinfo

Summary

An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Responsible

MITRE

Reservation

03/04/2026

Disclosure

03/31/2026

Entries

VulDB provides additional information and datapoints for this CVE:

Do you want to use VulDB in your project?

Use the official API to access entries easily!