CVE-2025-47568

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/dzs-zoomsounds/vulnerability/wordpress-zoomsounds-plugin-6-91-php-object-injection-vulnerability · Third Party Advisory

zoomsounds のその他の脆弱性

• CVE-2021-4457緊急 9.1The ZoomSounds plugin before 6.05 contains a PHP file allowing unauthenticated users to upload an arbitrary file anywhere on the web server.
• CVE-2025-3431高 7.5The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, …
• CVE-2025-0839中 5.4The ZoomSounds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 6.91 due t…
• CVE-2024-13776高 8.1The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to unauthorized modification of data that can …
• CVE-2024-13777緊急 9.8The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,…