PT-2023-30798 · WordPress · Wordpress File Sharing Plugin

·

CVE-2023-4836

·

Publicado

2023-09-30

·

Atualizado

2025-04-03

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions WordPress File Sharing Plugin versions prior to 2.0.5
Description The issue allows users to gain access to files and folders by manipulating IDs, which can be easily brute forced, due to a lack of authorization checks.
Recommendations For WordPress File Sharing Plugin versions prior to 2.0.5, update to version 2.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and folders to minimize the risk of exploitation.

Exploit

Correção

IDOR

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-4836

Produtos afetados

Wordpress File Sharing Plugin