Netskope Threat Labs

SERVER-WEBAPP WordPress ZoomSounds plugin unauthenticated PHP shell upload detected

IPS-NPA

1 SID: 300023

Description

Detects an attempt to exploit CVE-2021-4449, an arbitrary file upload flaw that can plant webshells on the server in WordPress ZoomSounds plugin unauthenticated PHP.

CVEs

CVE-2021-4449

References