1 matches found
CVE-2024-13776: Missing Authorization
The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'dzsapdeletenotice' AJAX action in all versions up to, and including, 6.91. This makes i...
8.1CVSS5.5AI score0.00346EPSS
SaveExploits0References1
20