Skip to content
OpenAdvisories

Vendor

ZoomIt

11 known vulnerabilities.

Products

ZoomSounds - WordPress Wave Audio Player with Playlist 6 WooCommerce Shop Page Builder 2 ZoomSounds 1 DZS Video Gallery 1 FoodMenu 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-47568

    WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ZoomIt ZoomSounds dzs-zoomsounds allows Object Injection.This issue affects ZoomSounds: from n/a through <= 6.91.

    ZoomIt ZoomSounds
  • Critical 9.8
    CVE-2021-4449 Scanner template

    ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload

    The ZoomSounds plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'savepng.php' file in versions up to, and including, 5.96. This makes it possible for unauthenticated attackers to upload arbitrary files on…

    ZoomIt ZoomSounds - WordPress Wave Audio Player with Playlist Web / CMS