wpzoom Vulnerabilities and Affected Products
Vulnerabilities associated with Inspiro.
Products
Clear product- WPZOOM Addons for Beaver Builder5 vulnerabilities
- WPZOOM Addons for Elementor – Starter Templates & Widgets4 vulnerabilities
- Recipe Card Blocks for Gutenberg & Elementor3 vulnerabilities
- Beaver Builder Addons by WPZOOM2 vulnerabilities
- WPZOOM Addons for Elementor2 vulnerabilities
- WPZOOM Portfolio2 vulnerabilities
- WPZOOM Shortcodes2 vulnerabilities
- wpzoom_addons_for_elementor2 vulnerabilities
- Inspiro1 vulnerability
- Recipe Card Blocks Lite1 vulnerability
- Social Icons Widget & Block by WPZOOM1 vulnerability
- Social Icons Widget & Block – Social Media Icons & Share Buttons1 vulnerability
- WPZOOM Addons for Elementor (Templates, Widgets)1 vulnerability
- WPZOOM Portfolio Lite – Filterable Portfolio Plugin1 vulnerability
- WPZOOM Social Feed Widget & Block1 vulnerability
- wpzoom_portfolio1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-8592HIGH | Inspiro <= 2.1.2 - Cross-Site Request Forgery to Arbitrary Plugin InstallationThe Inspiro theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2. This is due to missing or incorrect nonce validation on the inspiro_install_plugin() function. This makes it possible for unauthenticated attackers to install plugins from the repository via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. CWE-352Aug 21, 2025 | CVSS8.1v3.1 | EPSS0.214% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |