EDB-50564
PoCWordPress Plugin DZS Zoomsounds 6.45 - Arbitrary File Read (Unauthenticated)
view exploit source exploit_dbtype webappsauthor Uriel Yochpazpublished 2021-12-03catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-39316US | medium5.0 | Exploit | ||
The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan