Login Request a demo
ZO
Product
Zoomsounds
by Digitalzoomstudio · last CVE Jun 25, 2025
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 5High 3Medium 1Low 0
Severity
All severities9Critical5High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zoomsounds to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-47568
9.8
1%
May 23
WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability
Affected: through 6.91
CVE-2024-13777
9.8
1%
Mar 5
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection
Affected: through 6.91
CVE-2021-4449
9.8
5%
Oct 16
ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload
Affected: through 5.96
CVE-2015-9471
9.8
4%
Oct 10
The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload
Affected: through 2.0
CVE-2021-4457
9.1
0%
Jun 25
ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload
Affected: before 6.05
CVE-2024-13776
8.1
0%
Apr 5
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation
Affected: through 6.91
CVE-2025-3431
7.5
0%
Apr 8
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download
Affected: through 6.91
CVE-2021-39316
7.5
66%
Aug 31
The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action…
Affected: through 6.45
CVE-2025-0839
5.4
0%
Apr 5
ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 6.91
Showing 9