CVE-2023-4636

The CVE-2023-4636 issue affects the WordPress File Sharing Plugin for WordPress, version 2.0.3 and earlier. It is a Stored Cross-Site Scripting vulnerability caused by insufficient input sanitization and output escaping in admin settings, exploitable by authenticated users with administrator-leve...

CVE-2023-4836

The vulnerability CVE-2023-4836 affects the WordPress File Sharing Plugin (prior to version 2.0.5). The root cause is missing authorization checks, enabling IDOR-style access where an attacker can manipulate IDs to view files/folders, potentially exposing private data. Reported impact is exposure...