| Package | Affected versions | Patched versions |
|---|---|---|
| zoomsounds | ≤ 6.45 |
The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free