Skip to content
OpenAdvisories

Vendor

ZoomIt

11 known vulnerabilities.

Products

ZoomSounds - WordPress Wave Audio Player with Playlist 6 WooCommerce Shop Page Builder 2 ZoomSounds 1 DZS Video Gallery 1 FoodMenu 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-39316 Public exploit EPSS 66%

    ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure

    The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter.

    ZoomIt ZoomSounds - WordPress Wave Audio Player with Playlist Web / CMS