Paper/Archive/CVE-2021-4449

CVE-2021-4449

ZoomIt ZoomSounds - WordPress Wave Audio Player with Playlist — ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload

EPSS 5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 92.7.927 × 2018.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The ZoomSounds plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'savepng.php' file in versions up to, and including, 5.96. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. CVE-2021-4457 is a duplicate of this.

Affected

ProductAffectedFixed inSource

ZoomSounds - WordPress Wave Audio Player with Playlist≤ 5.96–CNA

zoomsounds≤ 5.96–CISA-ADP

Scores by source

Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/262e3bb3-bc83-4d0b-8056-9f94ec141b8f?source=cve refithemes.com/blog/wordpress-vulnerability-report-june-2021-part-5/#ib-toc-anchor-2 refwpscan.com/vulnerability/07259a61-8ba9-4dd0-8d52-cc1df389c0ad refsploitus.com/exploit?id=WPEX-ID:07259A61-8BA9-4DD0-8D52-CC1DF389C0AD refgithub.com/0xAgun/Arbitrary-File-Upload-ZoomSounds refcodecanyon.net/item/zoomsounds-wordpress-wave-audio-player-with-playlist/6181433