← CVE Intelligence

CVE-2023-0335

WP Shamsi <= 4.3.3 - Subscriber+ Attachment Deletion PUBLISHED

Description (CNA)

The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber delete attachment.

Affected (CNA)

Vendor / productVersions
Unknown / WP Shamsiaffected 0 through 4.3.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.