AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-4930

MEDIUM · CVSS 6.5 EPSS 0.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-11-06 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.5. It affects WordPress.

CVE
CVE-2023-4930
Severity
MEDIUM
CVSS
6.5
EPSS
0.41%
WordPress

Original NVD Description

The Front End PM WordPress plugin before 11.4.3 does not block listing the contents of the directories where it stores attachments to private messages, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled.