Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-39316

ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure

Description

The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZoomIt ZoomSounds - WordPress Wave Audio Player with Playlist

  • 6.45 to ≤ 6.45affected

References