Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-4023

All Users Messenger <= 1.24 - Subscriber+ Message Deletion via IDOR

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The All Users Messenger WordPress plugin through 1.24 does not prevent non-administrator users from deleting messages from the all-users messenger.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown All Users Messenger

Default version status: affected

  • 0 to ≤ 1.24affected

References