CVE-2023-4836 — WordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR
The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by…
Published: 2023-10-31 · CVSS: 4.3 · CVSS 3.1
The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7