Zoomit Zoomsounds vulnerabilities

• digitalzoomstudio zoomsounds WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability CVE-2025-47568 9.8 CriticalMay 23, 2025
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download CVE-2025-3431 7.5 HighApril 8, 2025
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-0839 6.4 MediumApril 5, 2025
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation CVE-2024-13776 8.1 HighApril 5, 2025
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection CVE-2024-13777 8.1 HighMarch 5, 2025
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload CVE-2021-4449 9.8 CriticalOctober 16, 2024
• digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure CVE-2021-39316 Public exploit EPSS 65.8% 7.5 HighAugust 31, 2021