WordPress Plugin Vulnerabilities
Front End PM < 11.4.3 - Sensitive Data Exposure via Directory Listing
Description
The plugin does not block listing the contents of the directories where it stores attachments to private messages, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled.
Proof of Concept
http://your_site/wp-content/uploads/front-end-pm/2023/09/
Affects Plugins
Fixed in 11.4.3 References
CVE
Classification
Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Dmitrii Ignatyev
Submitter
Dmitrii Ignatyev
Submitter website
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2023-10-16 (about 6 months ago)
Added
2023-10-16 (about 6 months ago)
Last Updated
2023-10-16 (about 6 months ago)
WPScan 