ZoomIt vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20241
3. 20258
4. 20261

Newest CVEs

• CVE-2025-49049

  WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerability

  ZoomIt · DZS Video Gallery

  High8.5
• CVE-2025-28999

  WordPress WooCommerce Shop Page Builder <= 2.27.7 - Cross Site Scripting (XSS) Vulnerability

  ZoomIt · WooCommerce Shop Page Builder

  High7.1
• CVE-2025-29014

  WordPress FoodMenu <= 1.20 - Cross Site Scripting (XSS) Vulnerability

  ZoomIt · FoodMenu

  High7.1
• CVE-2025-29001

  WordPress WooCommerce Shop Page Builder plugin <= 2.27.7 - Broken Access Control Vulnerability

  ZoomIt · WooCommerce Shop Page Builder

  Medium4.3
• CVE-2025-47568

  WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability

  ZoomIt · ZoomSounds

  Critical9.8
• CVE-2025-3431

  ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download

  ZoomIt · ZoomSounds - WordPress Wave Audio Player with Playlist

  High7.5
• CVE-2025-0839

  ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  ZoomIt · ZoomSounds - WordPress Wave Audio Player with Playlist

  Medium6.4
• CVE-2024-13776

  ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation

  ZoomIt · ZoomSounds - WordPress Wave Audio Player with Playlist

  High8.1
• CVE-2024-13777

  ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection

  ZoomIt · ZoomSounds - WordPress Wave Audio Player with Playlist

  High8.1
• CVE-2021-4449

  ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload

  ZoomIt · ZoomSounds - WordPress Wave Audio Player with Playlist

  Critical9.8