What’s Vulnerable › Products
ZoomIt ZoomSounds - WordPress Wave Audio Player with Playlist vulnerabilities
9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your ZoomIt ZoomSounds - WordPress Wave Audio Player with Playlist version is affected
Latest ZoomIt ZoomSounds - WordPress Wave Audio Player with Playlist vulnerabilities
- CVE-2021-4457 — ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload (CVSS 9.1)
- CVE-2025-47568 — WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability (CVSS 9.8)
- CVE-2025-3431 — ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download (CVSS 7.5)
- CVE-2025-0839 — ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
- CVE-2024-13776 — ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation (CVSS 8.1)
- CVE-2024-13777 — ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection (CVSS 9.8)
- CVE-2021-4449 — ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
- CVE-2021-39316 — ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure (CVSS 5.0)
- CVE-2015-9471 — (CVSS 9.8)