Wpzoom vulnerabilities

Products

• Beaver Builder Addons 7
• Addons For Beaver Builder 5
• Recipe Card Blocks For Gutenberg & Elementor 4
• Addons For Elementor – Starter Templates & Widgets 4
• Recipe Card Blocks For Gutenberg \& Elementor 3
• Addons For Elementor 3
• Elementor Addons 3
• Beaver Builder Addons By Wpzoom 2
• Social Icons Widget 2
• Social Icons Widget & Block By Wpzoom 2
• Addons For Elementor 2
• Portfolio 2
• Portfolio 2
• Shortcodes 2
• Shortcodes 2

Newest

• wpzoom connect: ai chat, click to chat, social icons & share buttons WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons <= 4.7.3 - Unauthenticated Sensitive Information Disclosure via HMAC Signature Collision (Missing Domain Separation) in HMAC Signat… CVE-2026-100149 5.3 MediumOctober 3, 2026
• wpzoom recipe card blocks for gutenberg & elementor WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.18 - Cross Site Scripting (XSS) vulnerability CVE-2026-73361 7.1 HighAugust 18, 2026
• wpzoom forms – contact form plugin for gutenberg WordPress WPZOOM Forms – Contact Form plugin for Gutenberg plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-66639 6.5 MediumAugust 18, 2026
• unknown wpzoom portfolio, wpzoom portfolio +1 more WordPress WPZOOM Portfolio plugin <= 1.4.29 - Cross Site Scripting (XSS) vulnerability CVE-2026-57712 7.1 HighJuly 13, 2026
• wpzoom addons for elementor WordPress WPZOOM Addons for Elementor plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-39597 7.1 HighJune 17, 2026
• unknown wpzoom portfolio, wpzoom portfolio +1 more WordPress WPZOOM Portfolio plugin <= 1.4.21 - Cross Site Scripting (XSS) vulnerability CVE-2026-49069 Public exploit 7.1 HighJune 10, 2026
• unknown recipe card blocks lite Recipe Card Blocks Lite <= 3.4.13 - Authenticated (Author+) Stored Cross-Site Scripting via 'summary' and 'notes' CVE-2026-3011 6.4 MediumJune 8, 2026
• wpzoom social icons widget & block – social media icons & share buttons Social Icons Widget & Block <= 4.5.8 - Missing Authorization to Authenticated (Subscriber+) Sharing Configuration Creation CVE-2026-4063 4.3 MediumMarch 13, 2026
• wpzoom addons for elementor – starter templates & widgets WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via ajax_post_grid_load_more CVE-2026-2295 5.3 MediumFebruary 11, 2026
• wpzoom addons for elementor WordPress WPZOOM Addons for Elementor plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability CVE-2025-67951 6.5 MediumDecember 16, 2025
• wpzoom recipe card blocks for gutenberg & elementor WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.8 - Broken Access Control vulnerability CVE-2025-62019 6.5 MediumOctober 22, 2025
• wpzoom inspiro Inspiro <= 2.1.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation CVE-2025-8592 8.1 HighAugust 21, 2025
• wpzoom recipe card blocks for gutenberg & elementor WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.3 - Broken Access Control vulnerability CVE-2025-26983 4.3 MediumFebruary 25, 2025
• wpzoom beaver builder addons by wpzoom, beaver builder addons +1 more WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-30424 6.5 MediumNovember 19, 2024
• wpzoom recipe card blocks for gutenberg & elementor, recipe card blocks for gutenberg \& elementor +1 more WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.3.1 - Broken Access Control vulnerability CVE-2024-43293 4.3 MediumNovember 1, 2024
• wpzoom shortcodes WPZOOM Shortcodes <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode CVE-2024-9027 6.4 MediumSeptember 25, 2024
• wpzoom portfolio lite – filterable portfolio plugin, portfolio +1 more WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute CVE-2024-8276 6.4 MediumAugust 31, 2024
• wpzoom beaver builder addons by wpzoom, beaver builder addons +1 more WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.5 - Local File Inclusion vulnerability CVE-2024-37464 4.9 MediumJuly 9, 2024
• wpzoom addons for elementor, addons for elementor – starter templates & widgets +1 more WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget CVE-2024-5686 6.4 MediumJune 20, 2024
• wpzoom social icons widget & block by wpzoom, social icons widget +1 more WordPress Social Icons Widget & Block by WPZOOM plugin <= 4.2.15 - Broken Access Control vulnerability CVE-2024-30464 5.4 MediumJune 9, 2024
• wpzoom addons for elementor, addons for elementor – starter templates & widgets, elementor addons +2 more WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.37 - Unauthenticated Local File Inclusion CVE-2024-5147 9.8 CriticalMay 22, 2024
• unknown social icons widget & block by wpzoom, wpzoom social icons widget +1 more Social Icons Widget & Block < 4.2.18 - Admin+ Stored XSS CVE-2024-2189 6.1 MediumMay 21, 2024
• wpzoom addons for elementor, addons for elementor – starter templates & widgets, elementor addons +2 more WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget CVE-2024-4370 6.4 MediumMay 14, 2024
• wpzoom addons for elementor (templates, widgets), elementor addons +1 more WordPress WPZOOM Addons for Elementor plugin <= 1.1.35 - Cross Site Scripting (XSS) vulnerability CVE-2024-33539 6.5 MediumApril 29, 2024
• wpzoom social feed widget & block WPZOOM Social Feed Widget & Block <= 2.1.13 - Missing Authorization to Authenticated (Subscriber+) Instagram Image Deletion CVE-2024-3662 4.3 MediumApril 13, 2024
• wpzoom beaver builder addons, addons for beaver builder +1 more Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget CVE-2024-2183 6.4 MediumApril 9, 2024
• wpzoom beaver builder addons, addons for beaver builder +1 more Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget CVE-2024-2186 6.4 MediumApril 9, 2024
• wpzoom beaver builder addons, addons for beaver builder +1 more Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget CVE-2024-2181 6.4 MediumApril 9, 2024
• wpzoom beaver builder addons, addons for beaver builder +1 more Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget CVE-2024-2185 6.4 MediumApril 9, 2024
• wpzoom beaver builder addons, addons for beaver builder +1 more Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget CVE-2024-2187 6.4 MediumApril 9, 2024
• wpzoom shortcodes WordPress WPZOOM Shortcodes Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS) CVE-2024-22162 7.1 HighJanuary 31, 2024
• phil spectrum icon widget Icon Widget < 1.3.0 - Contributor+ Stored XSS via Shortcode CVE-2022-4763 5.4 MediumJanuary 30, 2023
• unknown wpzoom portfolio, wpzoom portfolio +1 more WPZOOM Portfolio < 1.2.2 - Contributor+ Stored XSS via Shortcode CVE-2022-4789 5.4 MediumJanuary 23, 2023
• unknown inspiro pro Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting CVE-2022-2391 5.4 MediumAugust 8, 2022
• unknown recipe card blocks by wpzoom, wpzoom recipe card blocks for gutenberg \& elementor +1 more Recipe Card Blocks < 2.8.3 - Contributor+ Stored Cross-Site Scripting CVE-2021-24634 5.4 MediumSeptember 27, 2021
• unknown recipe card blocks by wpzoom, wpzoom recipe card blocks for gutenberg \& elementor +1 more Recipe Card Blocks < 2.8.1 - Reflected Cross-Site Scripting CVE-2021-24632 6.1 MediumSeptember 27, 2021