CVE-2023-0335
27.03.2023, 16:15
The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber delete attachment.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| wpvar | wp_shamsi | 𝑥 ≤ 4.3.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration