ZoomSounds - WordPress Wave Audio Player with Playlist vulnerabilities

Product

ZoomSounds - WordPress Wave Audio Player with Playlist

by ZoomIt · last CVE Apr 8, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 2High 2Medium 1Low 0

Severity

Exploitation

Watch

Add ZoomSounds - WordPress Wave Audio Player with Playlist to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-13777	9.8	1%	Mar 5	ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection Affected: through 6.91
CVE-2021-4449	9.8	5%	Oct 16	ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload Affected: through 5.96
CVE-2024-13776	8.1	0%	Apr 5	ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation Affected: through 6.91
CVE-2025-3431	7.5	0%	Apr 8	ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download Affected: through 6.91
CVE-2025-0839	5.4	0%	Apr 5	ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 6.91