ZoomIt Vulnerabilities and Affected Products
Vulnerabilities associated with WooCommerce Shop Page Builder.
Products
Clear product- ZoomSounds - WordPress Wave Audio Player with Playlist6 vulnerabilities
- WooCommerce Shop Page Builder2 vulnerabilities
- ZoomSounds2 vulnerabilities
- DZS Video Gallery1 vulnerability
- FoodMenu1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-28999HIGH | WordPress WooCommerce Shop Page Builder <= 2.27.7 - Cross Site Scripting (XSS) VulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZoomIt WooCommerce Shop Page Builder allows Reflected XSS. This issue affects WooCommerce Shop Page Builder: from n/a through 2.27.7. CWE-79Aug 14, 2025 | CVSS7.1v3.1 | EPSS0.23% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-29001MEDIUM | WordPress WooCommerce Shop Page Builder plugin <= 2.27.7 - Broken Access Control VulnerabilityMissing Authorization vulnerability in ZoomIt WooCommerce Shop Page Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WooCommerce Shop Page Builder: from n/a through 2.27.7. CWE-862Jul 4, 2025 | CVSS4.3v3.1 | EPSS0.187% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |