Skip to content
Zoomit vulnerabilities
Newest
-
zoomit dzs video gallery
WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerability
CVE-2025-49049
8.5 High
-
digital zoom studio dzs video gallery
WordPress DZS Video Gallery plugin <= 12.37 - PHP Object Injection Vulnerability
CVE-2025-47552
9.8 Critical
-
digital zoom studio dzs video gallery
WordPress DZS Video Gallery plugin <= 12.25 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32300
7.1 High
-
digital zoom studio dzs video gallery
WordPress DZS Video Gallery plugin <= 12.25 - PHP Object Injection vulnerability
CVE-2025-47553
8.8 High
-
zoomit woocommerce shop page builder
WordPress WooCommerce Shop Page Builder <= 2.27.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-28999
7.1 High
-
zoomit foodmenu
WordPress FoodMenu <= 1.20 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-29014
7.1 High
-
zoomit woocommerce shop page builder
WordPress WooCommerce Shop Page Builder plugin <= 2.27.7 - Broken Access Control Vulnerability
CVE-2025-29001
4.3 Medium
-
digitalzoomstudio zoomsounds
WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability
CVE-2025-47568
9.8 Critical
-
digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download
CVE-2025-3431
7.5 High
-
digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more
ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-0839
6.4 Medium
-
digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation
CVE-2024-13776
8.1 High
-
digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection
CVE-2024-13777
8.1 High
-
digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more
ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload
CVE-2021-4449
9.8 Critical
-
digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more
ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure
CVE-2021-39316
Public exploit
EPSS 65.8%
7.5 High