Digitalzoomstudio vulnerabilities

Products

• Zoomsounds 9
• Video Gallery 2

Newest

• digitalzoomstudio comments capcha box WordPress Comments Capcha Box Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability CVE-2025-53226 7.1 HighAugust 20, 2025
• digitalzoomstudio zoomsounds ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload CVE-2021-4457 9.1 CriticalJune 25, 2025
• digitalzoomstudio zoomsounds WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability CVE-2025-47568 9.8 CriticalMay 23, 2025
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download CVE-2025-3431 7.5 HighApril 8, 2025
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-0839 6.4 MediumApril 5, 2025
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation CVE-2024-13776 8.1 HighApril 5, 2025
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection CVE-2024-13777 8.1 HighMarch 5, 2025
• digitalzoomstudio dzs ajaxer lite WordPress DZS Ajaxer Lite plugin <= 1.04 - Cross Site Scripting (XSS) vulnerability CVE-2025-23579 6.5 MediumMarch 3, 2025
• digital zoom studio demo user dzs WordPress Demo User DZS plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-23581 6.5 MediumFebruary 3, 2025
• digital zoom studio admin debug wordpress – enable debug WordPress Admin debug wordpress – enable debug Plugin <= 1.0.13 - Cross Site Request Forgery vulnerability CVE-2025-22503 4.3 MediumJanuary 7, 2025
• digital zoom studio parallaxer WordPress Parallaxer plugin <= 1.00 - Cross Site Scripting (XSS) vulnerability CVE-2024-51848 6.5 MediumNovember 19, 2024
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload CVE-2021-4449 9.8 CriticalOctober 16, 2024
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure CVE-2021-39316 Public exploit EPSS 65.8% 7.5 HighAugust 31, 2021
• digitalzoomstudio zoomsounds The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload. CVE-2015-9471 9.8 CriticalOctober 10, 2019
• digitalzoomstudio video gallery Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital... CVE-2014-9094 Public exploit 4.3 MediumNovember 26, 2014
• digitalzoomstudio video gallery Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video... CVE-2014-3923 4.3 MediumMay 30, 2014