Critical · 9.1 CVE-2021-4457 EUVD-2021-34682GHSA-5pwc-pv63-mq2v

ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload

Published Jun 25, 2025 · Updated Jul 1, 2025 · Assigned by WPScan

Description

The ZoomSounds plugin before 6.05 contains a PHP file allowing unauthenticated users to upload an arbitrary file anywhere on the web server.

Vendor	Product	Affected	Fixed
—	ZoomSounds	< 6.05	6.05