DI
Vendor
Digitalzoomstudio
16
CVEs
0
On KEV
0
New 30D
Products
ZO9.8
Zoomsounds
Digitalzoomstudio
9 CVEs0 on KEV0 new
VG–
Video Gallery
Digitalzoomstudio
2 CVEs0 on KEV0 new
AD4.3
Admin debug wordpress – enable debug
digitalzoomstudio
1 CVEs0 on KEV0 new
CC7.1
Comments Capcha Box
digitalzoomstudio
1 CVEs0 on KEV0 new
DU6.5
Demo User DZS
digitalzoomstudio
1 CVEs0 on KEV0 new
DA6.5
DZS Ajaxer Lite
digitalzoomstudio
1 CVEs0 on KEV0 new
PA6.5
Parallaxer
digitalzoomstudio
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-53226 | CC Comments Capcha Box digitalzoomstudio | 7.1 | Aug 20 | WordPress Comments Capcha Box Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2021-4457 | ZO Zoomsounds Digitalzoomstudio | 9.1 | Jun 25 | ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload |
| CVE-2025-47568 | ZO Zoomsounds Digitalzoomstudio | 9.8 | May 23 | WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability |
| CVE-2025-3431 | ZO Zoomsounds Digitalzoomstudio | 7.5 | Apr 8 | ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download |
| CVE-2025-0839 | ZO Zoomsounds Digitalzoomstudio | 5.4 | Apr 5 | ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2024-13776 | ZO Zoomsounds Digitalzoomstudio | 8.1 | Apr 5 | ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation |
| CVE-2024-13777 | ZO Zoomsounds Digitalzoomstudio | 9.8 | Mar 5 | ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection |
| CVE-2025-23579 | DA DZS Ajaxer Lite digitalzoomstudio | 6.5 | Mar 3 | WordPress DZS Ajaxer Lite plugin <= 1.04 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-23581 | DU Demo User DZS digitalzoomstudio | 6.5 | Feb 3 | WordPress Demo User DZS plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-22503 | AD Admin debug wordpress – enable debug digitalzoomstudio | 4.3 | Jan 7 | WordPress Admin debug wordpress – enable debug Plugin <= 1.0.13 - Cross Site Request Forgery vulnerability |
| CVE-2024-51848 | PA Parallaxer digitalzoomstudio | 6.5 | Nov 19 | WordPress Parallaxer plugin <= 1.00 - Cross Site Scripting (XSS) vulnerability |
| CVE-2021-4449 | ZO Zoomsounds Digitalzoomstudio | 9.8 | Oct 16 | ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload |
| CVE-2021-39316 | ZO Zoomsounds Digitalzoomstudio | 7.5 | Aug 31 | The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action… |
| CVE-2015-9471 | ZO Zoomsounds Digitalzoomstudio | 9.8 | Oct 10 | The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload |
| CVE-2014-9094 | VG Video Gallery Digitalzoomstudio | – | Nov 26 | Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to… |
| CVE-2014-3923 | VG Video Gallery Digitalzoomstudio | – | May 30 | Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or… |