Vulnerabilidades em ZoomIt
11 resultadosAnálise Vexday
ZoomIt apresenta 11 vulnerabilidades catalogadas, sem registro de exploração ativa em campo (KEV zero), o que reduz a pressão imediata. O portfólio é dominado por falhas de injeção XSS (CWE-79), com apenas 2 vulnerabilidades críticas; nenhuma divulgação recente (últimos 90 dias) sugere que o risco está estabilizado. A ausência de exploração ativa não elimina o risco, especialmente considerando a natureza dos XSS, que permanecem vetores viáveis em cenários de supply chain.
CVE-2021-39316HIGHZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information DislosureEPSS 65.8%CVE-2021-4449CRITICALZoomSounds <= 5.96 - Unauthenticated Arbitrary File UploadEPSS 5.4%CVE-2024-13777HIGHZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object InjectionEPSS 0.6%CVE-2025-47568CRITICALWordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2025-49049HIGHWordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-3431HIGHZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File DownloadEPSS 0.4%CVE-2024-13776HIGHZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings ManipulationEPSS 0.3%CVE-2025-28999HIGHWordPress WooCommerce Shop Page Builder <= 2.27.7 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-29014HIGHWordPress FoodMenu <= 1.20 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-0839MEDIUMZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.2%CVE-2025-29001MEDIUMWordPress WooCommerce Shop Page Builder plugin <= 2.27.7 - Broken Access Control VulnerabilityEPSS 0.2%