CVE-2023-4930

MEDIUM 6.5CVE-2023-4930 · Published 06/11/2023 · updated 17/06/2026

In short

CVE-2023-4930 is a MEDIUM (CVSS 6.5) vulnerability affecting front end pm (shamimsplugins).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.1% of all vulnerabilities.
Fix: update to 11.4.3 or later.

Package	Affected versions	Patched versions
front end pm shamimsplugins	`< 11.4.3`	`11.4.3`

Description

The Front End PM WordPress plugin before 11.4.3 does not block listing the contents of the directories where it stores attachments to private messages, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled.

References

wpscan.com/vulnerability/c73b3276-e6f1-4f22-a888-025e5d0504f2 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free