Read the docs

wpzoom

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

wpzoom records in CISA KEV

No wpzoom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Beaver Builder Addons 7 records LOW Recipe Card Blocks For Gutenberg & Elementor 3 records LOW Wpzoom Elementor Addons 3 records MEDIUM Social Icons Widget 2 records MEDIUM Wpzoom Portfolio 2 records MEDIUM Wpzoom Shortcodes 2 records LOW Icon Widget 1 record LOW Inspiro Pro 1 record LOW

Records

7 records in Beaver Builder Addons · all components

TI-2024-02032 CVE-2024-2187 · GHSA-hw6g-94cf-m7rp

Cross-site scripting in WPZOOM Addons for Beaver Builder

Priority LOW 29

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonials widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and out…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00423 Published 2024-04-09 No fix listed CWE-79
TI-2024-02031 CVE-2024-2186 · GHSA-x723-q7ww-gm79

Cross-site scripting in WPZOOM Addons for Beaver Builder

Priority LOW 29

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Team Members widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and out…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00423 Published 2024-04-09 No fix listed CWE-79
TI-2024-02030 CVE-2024-2185 · GHSA-5qq4-q34c-9875

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget

Priority LOW 29

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Box widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00423 Published 2024-04-09 No fix listed CWE-79
TI-2024-02028 CVE-2024-2183 · GHSA-44j5-2jvm-f6f7

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget

Priority LOW 29

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00423 Published 2024-04-09 No fix listed CWE-79
TI-2024-02026 CVE-2024-2181 · GHSA-4wc6-f79m-2qgj

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget

Priority LOW 29

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00423 Published 2024-04-09 No fix listed CWE-79
TI-2024-20150 CVE-2024-30424 · GHSA-3p2r-95j5-h86j

WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM Beaver Builder Addons by WPZOOM wpzoom-addons-for-beaver-builder allows Stored XSS.This issue affects Beaver Bu…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00237 Published 2024-11-19 No fix listed CWE-79
TI-2024-24968 CVE-2024-37464 · GHSA-6frx-v3v6-q7x6

WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.5 - Local File Inclusion vulnerability

Priority LOW 24

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPZOOM Beaver Builder Addons by WPZOOM allows Path Traversal.This issue affects Beaver Builder Addons by WPZOOM: from n/a th…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00864 Published 2024-07-09 No fix listed CWE-22
Open these records in search →