wpzoom Vulnerabilities and Affected Products
Vulnerabilities associated with WPZOOM Shortcodes.
Products
Clear product- WPZOOM Addons for Beaver Builder5 vulnerabilities
- WPZOOM Addons for Elementor – Starter Templates & Widgets4 vulnerabilities
- Recipe Card Blocks for Gutenberg & Elementor3 vulnerabilities
- Beaver Builder Addons by WPZOOM2 vulnerabilities
- WPZOOM Addons for Elementor2 vulnerabilities
- WPZOOM Portfolio2 vulnerabilities
- WPZOOM Shortcodes2 vulnerabilities
- wpzoom_addons_for_elementor2 vulnerabilities
- Inspiro1 vulnerability
- Recipe Card Blocks Lite1 vulnerability
- Social Icons Widget & Block by WPZOOM1 vulnerability
- Social Icons Widget & Block – Social Media Icons & Share Buttons1 vulnerability
- WPZOOM Addons for Elementor (Templates, Widgets)1 vulnerability
- WPZOOM Portfolio Lite – Filterable Portfolio Plugin1 vulnerability
- WPZOOM Social Feed Widget & Block1 vulnerability
- wpzoom_portfolio1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-9027MEDIUM | WPZOOM Shortcodes <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via box ShortcodeThe WPZOOM Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CWE-79Sep 25, 2024 | CVSS6.4v3.1 | EPSS0.342% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-22162HIGH | WordPress WPZOOM Shortcodes Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Shortcodes allows Reflected XSS.This issue affects WPZOOM Shortcodes: from n/a through 1.0.3. CWE-79Jan 31, 2024 | CVSS7.1v3.1 | EPSS0.331% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |