CVE-2021-39316

creationtimestamp| type| source ---|---|--- 2021-08-31 16:33:32+00:00| seen| https://t.me/cibsecurity/28082 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-39316.yaml 2025-05-01 00:00:00+00:00| seen| The Shadowserver...

CVE-2021-39316 ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure

The Zoomsounds plugin = 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the dzsapdownload action using directory traversal in the link parameter...

CVE-2021-39316

CVE-2021-39316 affects WordPress ZoomSounds plugin (versions &lt;= 6.45/6.50 per sources). The entailed issue is a Local File Inclusion via the dzsap_download action using directory traversal in the link parameter, allowing download of arbitrary files such as wp-config.php. Nuclei templates descr...