Log in Start free

WPZOOM

Products

ProductCVEsExploitedLatest
WPZOOM Addons for Beaver Builder5–Apr 9, 2024
WPZOOM Addons for Elementor – Starter Templates & Widgets4–Feb 11, 2026
Recipe Card Blocks for Gutenberg & Elementor4–Aug 18, 2026
Beaver Builder Addons by WPZOOM2–Nov 19, 2024
WPZOOM Addons for Elementor2–Jun 17, 2026
WPZOOM Portfolio2–Jul 13, 2026
WPZOOM Shortcodes2–Sep 25, 2024
WPZOOM Portfolio Lite – Filterable Portfolio Plugin1–Aug 31, 2024
Inspiro1–Aug 21, 2025
WPZOOM Addons for Elementor (Templates, Widgets)1–Apr 29, 2024
WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons1–Oct 3, 2026
WPZOOM Forms – Contact Form Plugin for Gutenberg1–Aug 18, 2026
WPZOOM Social Feed Widget & Block1–Apr 13, 2024
Social Icons Widget & Block – Social Media Icons & Share Buttons1–Mar 13, 2026
Social Icons Widget & Block by WPZOOM1–Jun 9, 2024
Recipe Card Blocks Lite1–Jun 8, 2026

Exploited and recent CVEs

  • CVE-2026-100149 Medium 5.3 WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons <= 4.7.3 - Unauthenticated Sensitive Information Disclosure via HMAC Signature Collision (Missing Domain Separation) in HMAC Signature Domain-Separation Flaw in `/yamidoo/v1/customer`… 0.3%
  • CVE-2026-73361 High 7.1 WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.18 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-66639 Medium 6.5 WordPress WPZOOM Forms – Contact Form plugin for Gutenberg plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57712 High 7.1 WordPress WPZOOM Portfolio plugin <= 1.4.29 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-39597 High 7.1 WordPress WPZOOM Addons for Elementor plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-49069 High 7.1 WordPress WPZOOM Portfolio plugin <= 1.4.21 - Cross Site Scripting (XSS) vulnerability 1.2%
  • CVE-2026-3011 Medium 6.4 Recipe Card Blocks Lite <= 3.4.13 - Authenticated (Author+) Stored Cross-Site Scripting via 'summary' and 'notes' 0.2%
  • CVE-2026-4063 Medium 4.3 Social Icons Widget & Block <= 4.5.8 - Missing Authorization to Authenticated (Subscriber+) Sharing Configuration Creation 0.2%
  • CVE-2026-2295 Medium 5.3 WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via ajax_post_grid_load_more 0.4%
  • CVE-2025-67951 Medium 6.5 WordPress WPZOOM Addons for Elementor plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-62019 Medium 6.5 WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.8 - Broken Access Control vulnerability 0.3%
  • CVE-2025-8592 High 8.1 Inspiro <= 2.1.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation 0.2%
  • CVE-2025-26983 Medium 4.3 WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.3 - Broken Access Control vulnerability 0.3%
  • CVE-2024-30424 Medium 6.5 WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-43293 Medium 4.3 WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.3.1 - Broken Access Control vulnerability 0.4%
  • CVE-2024-9027 Medium 6.4 WPZOOM Shortcodes <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode 0.4%
  • CVE-2024-8276 Medium 6.4 WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute 0.4%
  • CVE-2024-37464 Medium 4.9 WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.5 - Local File Inclusion vulnerability 0.9%
  • CVE-2024-5686 Medium 6.4 WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget 0.4%
  • CVE-2024-30464 Medium 5.4 WordPress Social Icons Widget & Block by WPZOOM plugin <= 4.2.15 - Broken Access Control vulnerability 1.5%
  • CVE-2024-5147 Critical 9.8 WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.37 - Unauthenticated Local File Inclusion 1.0%
  • CVE-2024-4370 Medium 6.4 WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget 0.4%
  • CVE-2024-33539 Medium 6.5 WordPress WPZOOM Addons for Elementor plugin <= 1.1.35 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-3662 Medium 4.3 WPZOOM Social Feed Widget & Block <= 2.1.13 - Missing Authorization to Authenticated (Subscriber+) Instagram Image Deletion 0.5%
  • CVE-2024-2183 Medium 6.4 Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget 0.4%
  • CVE-2024-2186 Medium 6.4 Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget 0.4%
  • CVE-2024-2181 Medium 6.4 Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget 0.4%
  • CVE-2024-2185 Medium 6.4 Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget 0.4%
  • CVE-2024-2187 Medium 6.4 Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget 0.4%
  • CVE-2024-22162 High 7.1 WordPress WPZOOM Shortcodes Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS) 0.3%