Vulnerabilities in WPZOOM
27 resultsVexday analysis
WPZOOM apresenta 12 vulnerabilidades conhecidas sem incidentes de exploração ativa confirmada, mantendo risco moderado. A fraqueza dominante é XSS (CWE-79), típica de plataformas web, com 3 novos registros nos últimos 90 dias indicando descobertas recentes. Ausência de severidade crítica reduz urgência, mas o padrão de XSS requer atenção contínua em patches.
CVE-2024-30424MEDIUMWordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-8592HIGHInspiro <= 2.1.2 - Cross-Site Request Forgery to Arbitrary Plugin InstallationEPSS 0.2%CVE-2026-4063MEDIUMSocial Icons Widget & Block <= 4.5.8 - Missing Authorization to Authenticated (Subscriber+) Sharing Configuration CreationEPSS 0.2%CVE-2026-3011MEDIUMRecipe Card Blocks Lite <= 3.4.13 - Authenticated (Author+) Stored Cross-Site Scripting via 'summary' and 'notes'EPSS 0.2%CVE-2026-57712HIGHWordPress WPZOOM Portfolio plugin <= 1.4.29 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-39597HIGHWordPress WPZOOM Addons for Elementor plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-67951MEDIUMWordPress WPZOOM Addons for Elementor plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%