ZZoomIt

Products

Exploited and recent CVEs

• CVE-2025-49049 High 8.5 WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerability 0.4%
• CVE-2025-28999 High 7.1 WordPress WooCommerce Shop Page Builder <= 2.27.7 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-29014 High 7.1 WordPress FoodMenu <= 1.20 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-29001 Medium 4.3 WordPress WooCommerce Shop Page Builder plugin <= 2.27.7 - Broken Access Control Vulnerability 0.2%
• CVE-2025-47568 Critical 9.8 WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability 0.5%
• CVE-2025-3431 High 7.5 ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download 0.4%
• CVE-2025-0839 Medium 6.4 ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.2%
• CVE-2024-13776 High 8.1 ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation 0.4%
• CVE-2024-13777 High 8.1 ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection 0.6%
• CVE-2021-4449 Critical 9.8 ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload 5.4%
• CVE-2021-39316 High 7.5 ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure 65.8%