CVE

CVE-2021-39316

7.5

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

zoomsounds - wordpress wave audio player with playlist

Updated Sep 26, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2021-39316 Scanner

CVE-2021-39316 scanner - Unauthenticated Directory Traversal and Sensitive Information Dislosure vulnerability in ZoomSounds

Used 2.7k times · 5.9k assets checked · url

Scanner page →Run scanner

CVE history: zoomsounds - wordpress wave audio player with playlist

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →