CVE-2021-39316 — ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure
The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` acti…
Published: 2021-08-31 · CVSS: 7.5 · CVSS 3.1
The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7