Skip to content
Noroxi

wpzoom records

22 published records for vendor wpzoom.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
27.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

22 records
  • CVE-2024-5147
    39Monitor

    WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.37 - Unauthenticated Local File Inclusion

    CriticalCVSS 9.8No exploitEPSS 1%

    wpzoom · wpzoom elementor addonsMay 22, 2024

  • CVE-2024-30464
    35Monitor

    WordPress Social Icons Widget & Block by WPZOOM plugin <= 4.2.15 - Broken Access Control vulnerability

    HighCVSS 8.8Proof of conceptEPSS 2%

    wpzoom · social icons widgetJun 9, 2024

  • CVE-2024-43293
    35Monitor

    WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.3.1 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    wpzoom · recipe card blocks for gutenberg \& elementorNov 1, 2024

  • CVE-2021-24632
    24Monitor

    Recipe Card Blocks < 2.8.1 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    wpzoom · recipe card blocks for gutenberg \& elementorSep 27, 2021

  • CVE-2024-2189
    24Monitor

    Social Icons Widget & Block < 4.2.18 - Admin+ Stored XSS

    MediumCVSS 6.1No exploitEPSS 0%

    wpzoom · social icons widgetMay 21, 2024

  • CVE-2024-22162
    24Monitor

    WordPress WPZOOM Shortcodes Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    wpzoom · wpzoom shortcodesJan 31, 2024

  • CVE-2021-24634
    21Monitor

    Recipe Card Blocks < 2.8.3 - Contributor+ Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    wpzoom · recipe card blocks for gutenberg \& elementorSep 27, 2021

  • CVE-2022-2391
    21Monitor

    Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    wpzoom · inspiro proAug 8, 2022

  • CVE-2022-4789
    21Monitor

    WPZOOM Portfolio < 1.2.2 - Contributor+ Stored XSS via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · wpzoom portfolioJan 23, 2023

  • CVE-2022-4763
    21Monitor

    Icon Widget < 1.3.0 - Contributor+ Stored XSS via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · icon widgetJan 30, 2023

  • CVE-2024-2181
    21Monitor

    Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · beaver builder addonsApr 9, 2024

  • CVE-2024-2186
    21Monitor

    Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · beaver builder addonsApr 9, 2024

  • CVE-2024-2185
    21Monitor

    Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · beaver builder addonsApr 9, 2024

  • CVE-2024-2183
    21Monitor

    Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · beaver builder addonsApr 9, 2024

  • CVE-2024-2187
    21Monitor

    Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · beaver builder addonsApr 9, 2024

  • CVE-2024-4370
    21Monitor

    WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · wpzoom elementor addonsMay 14, 2024

  • CVE-2024-33539
    21Monitor

    WordPress WPZOOM Addons for Elementor plugin <= 1.1.35 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · wpzoom elementor addonsApr 29, 2024

  • CVE-2024-8276
    21Monitor

    WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · wpzoom portfolioAug 31, 2024

  • CVE-2024-9027
    21Monitor

    WPZOOM Shortcodes <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · wpzoom shortcodesSep 24, 2024

  • CVE-2024-5686
    21Monitor

    WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · wpzoom addons for elementorJun 20, 2024

  • CVE-2024-30424
    21Monitor

    WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    wpzoom · beaver builder addonsNov 19, 2024

  • CVE-2024-37464
    19Monitor

    WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.5 - Local File Inclusion vulnerability

    MediumCVSS 4.9No exploitEPSS 1%

    wpzoom · beaver builder addonsJul 9, 2024