CVE-2025-29001: Zoomit Woocommerce Shop Page Builder

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in ZoomIt WooCommerce Shop Page Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WooCommerce Shop Page Builder: from n/a through 2.27.7.

Affected products

• Zoomit Woocommerce Shop Page Builder: up to and including 2.27.7

Published 2025-07-04. Last modified 2026-06-17.