Pricing
Case studies
Login
Start trial
ZoomSounds
EPC
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
6 present
2 patched
7 Mitigation rules
Unauthenticated Arbitrary File Upload vulnerability
< 6.05
31/12/2025
WordPress ZoomSounds - WordPress Wave Audio Player with Playlist plugin <= 6.91 - Unauthenticated PHP Object Injection vulnerability
<= 6.91
31/12/2025
Reflected Cross Site Scripting (XSS) vulnerability
<= 6.91
03/06/2025
PHP Object Injection vulnerability
<= 6.91
20/05/2025
Unauthenticated Arbitrary File Download vulnerability
<= 6.91
07/04/2025
WordPress ZoomSounds - WordPress Wave Audio Player with Playlist plugin <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation vulnerability
<= 6.91
04/04/2025
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
<= 6.91
04/04/2025
Unauthenticated Directory Traversal vulnerability
<= 6.45
30/08/2021