Read the docs

wpzoom

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

wpzoom records in CISA KEV

No wpzoom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Beaver Builder Addons 7 records LOW Recipe Card Blocks For Gutenberg & Elementor 3 records LOW Wpzoom Elementor Addons 3 records MEDIUM Social Icons Widget 2 records MEDIUM Wpzoom Portfolio 2 records MEDIUM Wpzoom Shortcodes 2 records LOW Icon Widget 1 record LOW Inspiro Pro 1 record LOW

Records

2 records in Wpzoom Portfolio · all components

TI-2022-04385 CVE-2022-4789 · GHSA-xx8q-8jxm-3v8c

WPZOOM Portfolio < 1.2.2 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The WPZOOM Portfolio WordPress plugin before 1.2.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-23 Fixed in 1.2.2
TI-2024-07672 CVE-2024-8276 · GHSA-j2ww-8383-6mw8

Cross-site scripting in WPZOOM Portfolio Lite – Filterable Portfolio Plugin

Priority LOW 31

The WPZOOM Portfolio Lite – Filterable Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:wpzoom-blocks' Gutenberg block in all versions up to, and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00373 Published 2024-08-31 No fix listed CWE-79
Open these records in search →