WPZOOM vulnerabilities

CVEs per yearBy the year they were published

1. 202417
2. 20254
3. 20269

Newest CVEs

• CVE-2026-100149

  WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons <= 4.7.3 - Unauthenticated Sensitive Information Disclosure via HMAC Signature Collision (Missing Domain Separation) in HMAC Signature Domain-Separation Flaw in `/yamidoo/v1/customer`…

  wpzoom · WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons

  Medium5.3
• CVE-2026-73361

  WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.18 - Cross Site Scripting (XSS) vulnerability

  WPZOOM · Recipe Card Blocks for Gutenberg & Elementor

  High7.1
• CVE-2026-66639

  WordPress WPZOOM Forms – Contact Form plugin for Gutenberg plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

  WPZOOM · WPZOOM Forms – Contact Form Plugin for Gutenberg

  Medium6.5
• CVE-2026-57712

  WordPress WPZOOM Portfolio plugin <= 1.4.29 - Cross Site Scripting (XSS) vulnerability

  WPZOOM · WPZOOM Portfolio

  High7.1
• CVE-2026-39597

  WordPress WPZOOM Addons for Elementor plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

  WPZOOM · WPZOOM Addons for Elementor

  High7.1
• CVE-2026-49069

  WordPress WPZOOM Portfolio plugin <= 1.4.21 - Cross Site Scripting (XSS) vulnerability

  WPZOOM · WPZOOM Portfolio

  High7.1
• CVE-2026-3011

  Recipe Card Blocks Lite <= 3.4.13 - Authenticated (Author+) Stored Cross-Site Scripting via 'summary' and 'notes'

  wpzoom · Recipe Card Blocks Lite

  Medium6.4
• CVE-2026-4063

  Social Icons Widget & Block <= 4.5.8 - Missing Authorization to Authenticated (Subscriber+) Sharing Configuration Creation

  wpzoom · Social Icons Widget & Block – Social Media Icons & Share Buttons

  Medium4.3
• CVE-2026-2295

  WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via ajax_post_grid_load_more

  wpzoom · WPZOOM Addons for Elementor – Starter Templates & Widgets

  Medium5.3
• CVE-2025-67951

  WordPress WPZOOM Addons for Elementor plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

  WPZOOM · WPZOOM Addons for Elementor

  Medium6.5