What is CVE-2023-4930?

CVE-2023-4930 is a medium-severity vulnerability in Shamimsplugins Front End Pm, classified under Files or Directories Accessible to External Parties. CVSS score: 6.5/10. Published 2023-11-06.

How severe is CVE-2023-4930?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2023-4930 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Shamimsplugins Front End Pm

CVE-2023-4930

The Front End PM WordPress plugin before 11.4.3 does not block listing the contents of the directories where it stores attachments to private messages, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled.

EPSS: 0.004 (33.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

Affected products

Shamimsplugins Front_end_pm
Unknown Front End Pm — versions 0

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

Public proof-of-concept exploits

20142995/nuclei-templates

References

contact@wpscan.com (Exploit, technical-description, Third Party Advisory, exploit, vdb-entry)

Frequently asked questions

What is CVE-2023-4930?: CVE-2023-4930 is a medium-severity vulnerability in Shamimsplugins Front End Pm, classified under Files or Directories Accessible to External Parties. CVSS score: 6.5/10. Published 2023-11-06.
How severe is CVE-2023-4930?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2023-4930 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.