wpzoom

Records36All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

wpzoom records in CISA KEV

No wpzoom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Beaver Builder Addons 7 records LOW Recipe Card Blocks For Gutenberg & Elementor 3 records LOW Wpzoom Elementor Addons 3 records MEDIUM Social Icons Widget 2 records MEDIUM Wpzoom Portfolio 2 records MEDIUM Wpzoom Shortcodes 2 records LOW Icon Widget 1 record LOW Inspiro Pro 1 record LOW

Records

2 records in Wpzoom Shortcodes · all components

TI-2024-14763 CVE-2024-22162 · GHSA-crc6-rq97-7rcx

WordPress WPZOOM Shortcodes Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Shortcodes allows Reflected XSS.This issue affects WPZOOM Shortcodes: from n/a through 1.0.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00331 Published 2024-01-31 No fix listed CWE-79

TI-2024-08380 CVE-2024-9027 · GHSA-93ch-7fcj-pjpp

WPZOOM Shortcodes <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode

LOW 28

The WPZOOM Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escap…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00363 Published 2024-09-25 No fix listed CWE-79

Open these records in search →

Critical	1
High	8
Medium	27
Low	0
No CVSS	0