Digital zoom studio vulnerabilities and threats

8 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.4%	CVE-2025-47552DZS Video Gallery (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2026-01-07CVE Database V5CVE-2025-47552 Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.37. EPSS 0.4%Vulnerability Digital zoom studio CWE-502	CVE Database V5	2026-01-07
High	7.1	EPSS 0.2%	CVE-2025-32300DZS Video Gallery (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-01-07CVE Database V5CVE-2025-32300 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital zoom studio DZS Video Gallery allows Reflected XSS.This issue affects DZS Video Gallery: from n/a through 12.25. EPSS 0.2%Vulnerability Digital zoom studio CWE-79	CVE Database V5	2026-01-07
High	8.8	EPSS 0.3%	CVE-2025-47553DZS Video Gallery (WordPress plugin) · Deserialization of Untrusted Data High8.8EPSS 0.3%2026-01-06CVE Database V5CVE-2025-47553 Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25. EPSS 0.3%Vulnerability Digital zoom studio CWE-502	CVE Database V5	2026-01-06
High	7.1	EPSS 0.2%	CVE-2025-53226Comments Capcha Box (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-53226 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in digitalzoomstudio Comments Capcha Box comments-capcha-box allows Reflected XSS.This issue affects Comments Capcha Box: from n/a through <= 1.1. EPSS 0.2%Vulnerability digitalzoomstudio	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.3%	CVE-2025-23579DZS Ajaxer Lite (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2025-03-03CVE Database V5CVE-2025-23579 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in digitalzoomstudio DZS Ajaxer Lite dzs-ajaxer-lite-dynamic-page-load allows Stored XSS.This issue affects DZS Ajaxer Lite: from n/a through <= 1.04. EPSS 0.3%Vulnerability digitalzoomstudio	CVE Database V5	2025-03-03
Medium	6.5	EPSS 0.3%	CVE-2025-23581Demo User DZS (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2025-02-03CVE Database V5CVE-2025-23581 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in digitalzoomstudio Demo User DZS demo-user-dzs-showcase-your-admin-safely allows Stored XSS.This issue affects Demo User DZS: from n/a through <= 1.1.0. EPSS 0.3%Vulnerability digitalzoomstudio	CVE Database V5	2025-02-03
Medium	4.3	EPSS 0.2%	CVE-2025-22503Admin debug wordpress – enable debug · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-07CVE Database V5CVE-2025-22503 Cross-Site Request Forgery (CSRF) vulnerability in digitalzoomstudio Admin debug wordpress – enable debug dzs-enable-debug allows Cross Site Request Forgery.This issue affects Admin debug wordpress – enable debug: from n/a through <= 1.0.13. EPSS 0.2%Vulnerability digitalzoomstudio	CVE Database V5	2025-01-07
Medium	6.5	EPSS 0.4%	CVE-2024-51848Parallaxer (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.4%2024-11-19CVE Database V5CVE-2024-51848 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in digitalzoomstudio Parallaxer parallaxer-lite-parallax-effects-on-images allows Stored XSS.This issue affects Parallaxer: from n/a through <= 1.00. EPSS 0.4%Vulnerability digitalzoomstudio	CVE Database V5	2024-11-19

Page 1 of 1