Skip to content
OpenAdvisories

Vendor

ZoomIt

11 known vulnerabilities.

Products

ZoomSounds - WordPress Wave Audio Player with Playlist 6 WooCommerce Shop Page Builder 2 ZoomSounds 1 DZS Video Gallery 1 FoodMenu 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-29001

    WordPress WooCommerce Shop Page Builder plugin <= 2.27.7 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in ZoomIt WooCommerce Shop Page Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WooCommerce Shop Page Builder: from n/a through 2.27.7.

    ZoomIt WooCommerce Shop Page Builder Web / CMS
  • Medium 6.4
    CVE-2025-0839

    ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The ZoomSounds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 6.91 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authentic…

    ZoomIt ZoomSounds - WordPress Wave Audio Player with Playlist Web / CMS