What’s Vulnerable › Products

WPZOOM Portfolio vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your WPZOOM Portfolio version is affected

Latest WPZOOM Portfolio vulnerabilities

• CVE-2026-57712 — WordPress WPZOOM Portfolio plugin <= 1.4.29 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-49069 — WordPress WPZOOM Portfolio plugin <= 1.4.21 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-8276 — WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute (CVSS 5.4)
• CVE-2022-4789 — WPZOOM Portfolio < 1.2.2 - Contributor+ Stored XSS via Shortcode (CVSS 5.4)