CVE-2023-4297

The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories...

CVE-2023-4297

CVE-2023-4297: The Mmm Simple File List WordPress plugin (versions

CVE-2023-4297 Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing

The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories...

WordPress Mmm Simple File List Plugin <= 2.3 is vulnerable to Sensitive Data Exposure

Software Mmm Simple File List Type Plugin Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-4297 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 23f215a8b1b9 Credits Dmitrii Required privileg...