digitalzoomstudio kayıtları
digitalzoomstudio üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %9,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-502 Deserialization of Untrusted Data2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-73 External Control of File Name or Path1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
50Planlayın | CVE-2021-39316Kavram kanıtı | ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosuredigitalzoomstudio · zoomsounds · CWE-22 | Yüksek7,5 | — | %65,8 | 31 Ağu 2021 |
41Planlayın | CVE-2021-4449Kavram kanıtı | ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Uploaddigitalzoomstudio · zoomsounds · CWE-434 | Kritik9,8 | — | %5,4 | 16 Eki 2024 |
40Planlayın | CVE-2015-9471İstismar yok | The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload.digitalzoomstudio · zoomsounds · CWE-434 | Kritik9,8 | — | %4,0 | 10 Eki 2019 |
39İzleyin | CVE-2024-13777İstismar yok | ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injectiondigitalzoomstudio · zoomsounds · CWE-502 | Kritik9,8 | — | %0,6 | 5 Mar 2025 |
39İzleyin | CVE-2025-47568İstismar yok | WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerabilitydigitalzoomstudio · zoomsounds · CWE-502 | Kritik9,8 | — | %0,5 | 23 May 2025 |
36İzleyin | CVE-2021-4457İstismar yok | ZoomSounds < 6.05 - Unauthenticated Arbitrary File Uploaddigitalzoomstudio · zoomsounds · CWE-434 | Kritik9,1 | — | %0,4 | 25 Haz 2025 |
32İzleyin | CVE-2024-13776İstismar yok | ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipudigitalzoomstudio · zoomsounds · CWE-862 | Yüksek8,1 | — | %0,3 | 5 Nis 2025 |
30İzleyin | CVE-2025-3431İstismar yok | ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Downloaddigitalzoomstudio · zoomsounds · CWE-73 | Yüksek7,5 | — | %0,4 | 8 Nis 2025 |
21İzleyin | CVE-2025-0839İstismar yok | ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodedigitalzoomstudio · zoomsounds · CWE-79 | Orta5,4 | — | %0,2 | 5 Nis 2025 |
19İzleyin | CVE-2014-9094Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Video Gallery plugin fordigitalzoomstudio · video gallery · CWE-79 | Orta4,3 | — | %7,3 | 26 Kas 2014 |
17İzleyin | CVE-2014-3923İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackedigitalzoomstudio · video gallery · CWE-79 | Orta4,3 | — | %1,6 | 30 May 2014 |
- CVE-2021-3931650Planlayın
ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure
YüksekCVSS 7,5Kavram kanıtıEPSS %66digitalzoomstudio · zoomsounds31 Ağu 2021
- CVE-2021-444941Planlayın
ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8Kavram kanıtıEPSS %5digitalzoomstudio · zoomsounds16 Eki 2024
- CVE-2015-947140Planlayın
The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload.
KritikCVSS 9,8İstismar yokEPSS %4digitalzoomstudio · zoomsounds10 Eki 2019
- CVE-2024-1377739İzleyin
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection
KritikCVSS 9,8İstismar yokEPSS %1digitalzoomstudio · zoomsounds5 Mar 2025
- CVE-2025-4756839İzleyin
WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %1digitalzoomstudio · zoomsounds23 May 2025
- CVE-2021-445736İzleyin
ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,1İstismar yokEPSS %0digitalzoomstudio · zoomsounds25 Haz 2025
- CVE-2024-1377632İzleyin
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipu
YüksekCVSS 8,1İstismar yokEPSS %0digitalzoomstudio · zoomsounds5 Nis 2025
- CVE-2025-343130İzleyin
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download
YüksekCVSS 7,5İstismar yokEPSS %0digitalzoomstudio · zoomsounds8 Nis 2025
- CVE-2025-083921İzleyin
ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0digitalzoomstudio · zoomsounds5 Nis 2025
- CVE-2014-909419İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Video Gallery plugin for
OrtaCVSS 4,3Kavram kanıtıEPSS %7digitalzoomstudio · video gallery26 Kas 2014
- CVE-2014-392317İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attacke
OrtaCVSS 4,3İstismar yokEPSS %2digitalzoomstudio · video gallery30 May 2014