Skip to content
OpenAdvisories

Vendor

WPZOOM

32 known vulnerabilities.

Products

WPZOOM Addons for Beaver Builder 5 WPZOOM Addons for Elementor – Starter Templates & Widgets 4 Recipe Card Blocks for Gutenberg & Elementor 4 Beaver Builder Addons by WPZOOM 2 WPZOOM Shortcodes 2 WPZOOM Portfolio 2 WPZOOM Addons for Elementor 2 WPZOOM Social Feed Widget & Block 2 Social Icons Widget & Block by WPZOOM 1 Recipe Card Blocks Lite 1 WPZOOM Forms – Contact Form Plugin for Gutenberg 1 WPZOOM Portfolio Lite – Filterable Portfolio Plugin 1 WPZOOM Addons for Elementor (Templates, Widgets) 1 Social Icons Widget & Block – Social Media Icons & Share Buttons 1 Inspiro 1 WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons 1 WPBruiser {no- Captcha anti-Spam} 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.1
    CVE-2026-73361

    WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.18 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions.

    WPZOOM Recipe Card Blocks for Gutenberg & Elementor
  • High 7.1
    CVE-2026-57712

    WordPress WPZOOM Portfolio plugin <= 1.4.29 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Portfolio wpzoom-portfolio allows Reflected XSS.This issue affects WPZOOM Portfolio: from n/a through <= 1.4.29.

    WPZOOM WPZOOM Portfolio
  • High 7.1
    CVE-2026-39597

    WordPress WPZOOM Addons for Elementor plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WPZOOM Addons for Elementor <= 1.3.4 versions.

    WPZOOM WPZOOM Addons for Elementor
  • High 7.1
    CVE-2026-49069 Public exploit

    WordPress WPZOOM Portfolio plugin <= 1.4.21 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM Portfolio allows Reflected XSS. This issue affects WPZOOM Portfolio: from n/a through 1.4.21.

    WPZOOM WPZOOM Portfolio
  • High 8.1
    CVE-2025-8592

    Inspiro <= 2.1.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation

    The Inspiro theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2. This is due to missing or incorrect nonce validation on the inspiro_install_plugin() function. This makes it possible for unauthenticated …

    WPZOOM Inspiro Web / CMS
  • High 7.1
    CVE-2024-22162

    WordPress WPZOOM Shortcodes Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Shortcodes allows Reflected XSS.This issue affects WPZOOM Shortcodes: from n/a through 1.0.3.

    WPZOOM WPZOOM Shortcodes