wpzoom Vulnerabilities and Affected Products
Vulnerabilities associated with WPZOOM Social Feed Widget & Block.
Products
Clear product- WPZOOM Addons for Beaver Builder5 vulnerabilities
- WPZOOM Addons for Elementor – Starter Templates & Widgets4 vulnerabilities
- Recipe Card Blocks for Gutenberg & Elementor3 vulnerabilities
- Beaver Builder Addons by WPZOOM2 vulnerabilities
- WPZOOM Addons for Elementor2 vulnerabilities
- WPZOOM Portfolio2 vulnerabilities
- WPZOOM Shortcodes2 vulnerabilities
- wpzoom_addons_for_elementor2 vulnerabilities
- Inspiro1 vulnerability
- Recipe Card Blocks Lite1 vulnerability
- Social Icons Widget & Block by WPZOOM1 vulnerability
- Social Icons Widget & Block – Social Media Icons & Share Buttons1 vulnerability
- WPZOOM Addons for Elementor (Templates, Widgets)1 vulnerability
- WPZOOM Portfolio Lite – Filterable Portfolio Plugin1 vulnerability
- WPZOOM Social Feed Widget & Block1 vulnerability
- wpzoom_portfolio1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-3662MEDIUM | WPZOOM Social Feed Widget & Block <= 2.1.13 - Missing Authorization to Authenticated (Subscriber+) Instagram Image DeletionThe WPZOOM Social Feed Widget & Block plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpzoom_instagram_clear_data() function in all versions up to, and including, 2.1.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete all Instagram images installed on the site. CWE-862Apr 13, 2024 | CVSS4.3v3.1 | EPSS0.465% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |