ZoomIt vulnerabilities
11 published CVEs name ZoomIt among the affected products.
- 11Published CVEs11 of them scored
- 1Last 12 monthspublished in the last year
- 2Critical7 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-49049
WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerability
ZoomIt · DZS Video Gallery
High8.5 - CVE-2025-28999
WordPress WooCommerce Shop Page Builder <= 2.27.7 - Cross Site Scripting (XSS) Vulnerability
ZoomIt · WooCommerce Shop Page Builder
High7.1 - CVE-2025-29014
WordPress FoodMenu <= 1.20 - Cross Site Scripting (XSS) Vulnerability
ZoomIt · FoodMenu
High7.1 - CVE-2025-29001
WordPress WooCommerce Shop Page Builder plugin <= 2.27.7 - Broken Access Control Vulnerability
ZoomIt · WooCommerce Shop Page Builder
Medium4.3 - CVE-2025-47568
WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability
ZoomIt · ZoomSounds
Critical9.8 - CVE-2025-3431
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download
ZoomIt · ZoomSounds - WordPress Wave Audio Player with Playlist
High7.5 - CVE-2025-0839
ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
ZoomIt · ZoomSounds - WordPress Wave Audio Player with Playlist
Medium6.4 - CVE-2024-13776
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation
ZoomIt · ZoomSounds - WordPress Wave Audio Player with Playlist
High8.1 - CVE-2024-13777
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection
ZoomIt · ZoomSounds - WordPress Wave Audio Player with Playlist
High8.1 - CVE-2021-4449
ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload
ZoomIt · ZoomSounds - WordPress Wave Audio Player with Playlist
Critical9.8