Magiczoomplus for Joomla, versions 3.3.4 and previous, Sensitive information disclosure, Insecure folder permissions, Remote call information disclosure.
Resolution: update to 3.3.6
Update notice: https://www.magictoolbox.com/jv-release-update/
Note that the VEL do not agree with the developer's description of these as "low level security issues"