CVE-2023-4836

WordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR

Medium · published October 31, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
41.0
In the wild
Unconfirmed
What it is

The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00487 · 41.0th percentile
Published
2023-10-31T13:54Z
EPSS history
Timeline
  • 31 OCT 13:54Z
    WordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR
    cvelistv5