← CVE Intelligence

CVE-2023-4930

Front End PM < 11.4.3 - Sensitive Data Exposure via Directory Listing PUBLISHED

Description (CNA)

The Front End PM WordPress plugin before 11.4.3 does not block listing the contents of the directories where it stores attachments to private messages, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled.

Affected (CNA)

Vendor / productVersions
Unknown / Front End PMaffected 0 before 11.4.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.