Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

ZoomSounds - WordPress Wave Audio Player with Playlist — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in ZoomSounds - WordPress Wave Audio Player with Playlist, with AI-generated Chinese analysis, references, and POCs.

Vendor: ZoomIt

CVE IDTitleCVSSSeverityPublished
CVE-2025-3431 ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download CWE-73 7.5 High2025-04-08
CVE-2025-0839 ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2025-04-05
CVE-2024-13776 ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation CWE-862 8.1 High2025-04-05
CVE-2024-13777 ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection CWE-502 8.1 High2025-03-05
CVE-2021-4449 ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload CWE-434 9.8 Critical2024-10-16
CVE-2021-39316 ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure CWE-22 7.5 High2021-08-31

All 6 known CVE vulnerabilities affecting ZoomSounds - WordPress Wave Audio Player with Playlist with full Chinese analysis, references, and POCs where available.