Digitalzoomstudio vulnerabilities
We track 4 vulnerabilities in Digitalzoomstudio products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2025.
Latest Digitalzoomstudio vulnerabilities
- 7.1 High severity
Comments Capcha Box: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in digitalzoomstudio Comments Capcha Box comments-capcha-box allows Reflected XSS.This issue affects Comments Capcha Box: from n/a through <= 1.1.
- 7.5 High severity
ZoomSounds - WordPress Wave Audio Player with…: External Control of File Name or Path
The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.91 via the 'dzsap_download' action. This makes it possible for unauthenticated attackers to read the co
- 8.1 High severity
ZoomSounds - WordPress Wave Audio Player with…: Missing Authorization
The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'dzsap_delete_notice' AJAX action in all versions u
- 9.8 Critical severity
ZoomSounds - WordPress Wave Audio Player with…: Deserialization of Untrusted Data
The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.91 via deserialization of untrusted input from the 'margs' parameter. This makes it possible for unaut