← Back to browse · API

CVE-2021-39316

Severity
HIGH
CVSS
7.5
EPSS
0.65763
Risk score
53.02
CISA KEV
No
PoC
No
Published
2021-08-31
Modified
2025-05-05
First seen
2026-08-07
Aliases
EUVD-2021-25677, GHSA-6W94-3R46-X632
Products
ZoomIt:ZoomSounds - WordPress Wave Audio Player with Playlist 6.45 ≤6.45
Sources
euvd EUVD-2021-25677

Description

The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter.

References