CVE-2023-0335

The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber delete attachment.

Score

CVSS 3.1 6.5 Medium

Status

Modified - contact@wpscan.com

Published

2023-03-27

Last modified

2025-02-19

Weaknesses

CWE-352, CWE-862

Affected products

• Wp Shamsi (Unknown)
• Wp Shamsi (Wpvar)

References

• https://wpscan.com/vulnerability/f7a20bea-c3d5-431b-bdcf-e189c81a561a