wpzoom

Records36All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

wpzoom records in CISA KEV

No wpzoom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Beaver Builder Addons 7 records LOW Recipe Card Blocks For Gutenberg & Elementor 3 records LOW Wpzoom Elementor Addons 3 records MEDIUM Social Icons Widget 2 records MEDIUM Wpzoom Portfolio 2 records MEDIUM Wpzoom Shortcodes 2 records LOW Icon Widget 1 record LOW Inspiro Pro 1 record LOW

Records

2 records in Social Icons Widget · all components

TI-2024-02034 CVE-2024-2189 · GHSA-8962-3h36-6xxf

Social Icons Widget & Block < 4.2.18 - Admin+ Stored XSS

MEDIUM 60

The Social Icons Widget & Block by WPZOOM WordPress plugin before 4.2.18 does not sanitise and escape some of its Widget settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripti…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00391 Published 2024-05-21 Fixed in 4.2.18 CWE-79

TI-2024-20190 CVE-2024-30464 · GHSA-3pxr-3j7f-c35j

WordPress Social Icons Widget & Block by WPZOOM plugin <= 4.2.15 - Broken Access Control vulnerability

MEDIUM 41

Missing Authorization vulnerability in WPZOOM Social Icons Widget & Block by WPZOOM.This issue affects Social Icons Widget & Block by WPZOOM: from n/a through 4.2.15.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01504 Published 2024-06-09 No fix listed CWE-862

Open these records in search →

Critical	1
High	8
Medium	27
Low	0
No CVSS	0