CVEs we hold for Wpzoom

Records whose assigning authority named Wpzoom as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-73361WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.18 - Cross Site Scripting (XSS) vulnerabilityWPZOOM Recipe Card Blocks for Gutenberg & Elementor

CVE-2026-66639WordPress WPZOOM Forms – Contact Form plugin for Gutenberg plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilityWPZOOM Forms – Contact Form Plugin for Gutenberg

CVE-2026-57712WordPress WPZOOM Portfolio plugin <= 1.4.29 - Cross Site Scripting (XSS) vulnerabilityWPZOOM Portfolio

CVE-2026-49069WordPress WPZOOM Portfolio plugin <= 1.4.21 - Cross Site Scripting (XSS) vulnerabilityWPZOOM Portfolio

CVE-2026-4063Social Icons Widget & Block <= 4.5.8 - Missing Authorization to Authenticated (Subscriber+) Sharing Configuration…wpzoom Social Icons Widget & Block – Social Media Icons &…

CVE-2026-39597WordPress WPZOOM Addons for Elementor plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerabilityWPZOOM Addons for Elementor

CVE-2026-3011Recipe Card Blocks Lite <= 3.4.13 - Authenticated (Author+) Stored Cross-Site Scripting via 'summary' and 'notes'wpzoom Recipe Card Blocks Lite

CVE-2026-2295WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via…WPZOOM Addons for Elementor – Starter Templates & Widgets

CVE-2025-8592Inspiro <= 2.1.2 - Cross-Site Request Forgery to Arbitrary Plugin Installationwpzoom Inspiro

CVE-2025-67951WordPress WPZOOM Addons for Elementor plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerabilityWPZOOM Addons for Elementor

CVE-2025-62019WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.8 - Broken Access Control vulnerabilityWPZOOM Recipe Card Blocks for Gutenberg & Elementor

CVE-2025-26983WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.3 - Broken Access Control vulnerabilityWPZOOM Recipe Card Blocks for Gutenberg & Elementor

CVE-2024-9027WPZOOM Shortcodes <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via box ShortcodeWPZOOM Shortcodes

CVE-2024-8276WPZOOM Portfolio Lite – Filterable Portfolio Plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting…WPZOOM Portfolio Lite – Filterable Portfolio Plugin

CVE-2024-5686WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting…WPZOOM Addons for Elementor – Starter Templates & Widgets

CVE-2024-5147WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.37 - Unauthenticated Local File InclusionWPZOOM Addons for Elementor – Starter Templates & Widgets

CVE-2024-4370WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting…WPZOOM Addons for Elementor – Starter Templates & Widgets

CVE-2024-43293WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.3.1 - Broken Access Control vulnerabilityWPZOOM Recipe Card Blocks for Gutenberg & Elementor

CVE-2024-37464WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.5 - Local File Inclusion vulnerabilityWPZOOM

CVE-2024-3662WPZOOM Social Feed Widget & Block <= 2.1.13 - Missing Authorization to Authenticated (Subscriber+) Instagram Image…WPZOOM Social Feed Widget & Block

CVE-2024-33539WordPress WPZOOM Addons for Elementor plugin <= 1.1.35 - Cross Site Scripting (XSS) vulnerabilityWPZOOM Addons for Elementor (Templates, Widgets)

CVE-2024-30464WordPress Social Icons Widget & Block by WPZOOM plugin <= 4.2.15 - Broken Access Control vulnerabilityWPZOOM

CVE-2024-30424WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityWPZOOM

CVE-2024-22162WordPress WPZOOM Shortcodes Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)WPZOOM Shortcodes

CVE-2024-2187Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials…WPZOOM Addons for Beaver Builder

CVE-2024-2186Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members…WPZOOM Addons for Beaver Builder

CVE-2024-2185Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box WidgetWPZOOM Addons for Beaver Builder

CVE-2024-2183Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading WidgetWPZOOM Addons for Beaver Builder

CVE-2024-2181Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button WidgetWPZOOM Addons for Beaver Builder

CVE-2022-4789WPZOOM Portfolio < 1.2.2 - Contributor+ Stored XSS via ShortcodeUnknown WPZOOM Portfolio

30 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.