Plugin icon

DZS ZoomSounds

dzs-zoomsounds

Vulnerabilities:

9

Last Updated:

February 1, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-06-03
Title
ZoomSounds <= 6.91 - Reflected Cross-Site Scripting
Fixed in
No known fix
CVSS
6.1 (medium)
Published
2025-05-20
Title
ZoomSounds <= 6.91 - Unauthenticated PHP Object Injection
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2025-04-07
Title
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download
Fixed in
No known fix
CVSS
7.5 (high)
Published
2025-04-04
Title
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation
Fixed in
No known fix
CVSS
8.1 (high)
Published
2025-04-04
Title
ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2025-03-04
Title
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection
Fixed in
No known fix
CVSS
8.1 (high)
Published
2021-08-31
Title
DZS Zoomsounds < 6.50 - Unauthenticated Arbitrary File Download
Fixed in
Fixed in 6.50
CVSS
7.5 (high)
Published
2021-06-24
Title
ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 6.05
CVSS
10.0 (critical)
Published
2015-06-01
Title
ZoomSounds < 3.0 - Remote File Upload
Fixed in
Fixed in 3.0
CVSS
9.8 (critical)