Vulnetix
Try Vulnetix Request Demo
CVE-2023-4836 PUBLISHED CVSS 9.300000190734863 CRITICAL

The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced

EPSS 0.28% · 50.8th percentile

Risk Scores

CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.28%
50.8th percentile

Affected Products

VendorProductVersions
UnknownWordPress File Sharing Plugin0, 0, 0
userprivatefileswordpress_file_sharing_plugin0, 0, 0

Timeline

References

Open in Interactive Console →