ZW
Product
ZoomSounds - WordPress Wave Audio Player with Playlist
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 1Low 0
Watch
Add ZoomSounds - WordPress Wave Audio Player with Playlist to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-13777 | 9.8 | Mar 5 | ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection Affected: through 6.91 |
| CVE-2021-4449 | 9.8 | Oct 16 | ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload Affected: through 5.96 |
| CVE-2024-13776 | 8.1 | Apr 5 | ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation Affected: through 6.91 |
| CVE-2025-3431 | 7.5 | Apr 8 | ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download Affected: through 6.91 |
| CVE-2021-39316 | 7.5 | Aug 31 | ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure Affected: 6.45 through 6.45 |
| CVE-2025-0839 | 5.4 | Apr 5 | ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 6.91 |
Showing 6