Vulnerability · Published Oct 31, 2023 · Assigned by WPScan
CVE-2023-4836WordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR
Medium 4.3
In plain English
A medium-severity security flaw in WordPress File Sharing Plugin from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.6%top 51.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | WordPress File Sharing Plugin | 0 – before 2.0.5 |