Vulnerabilities > Userprivatefiles > Wordpress File Sharing Plugin > 2.0.4

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-31	CVE-2023-4836	Authorization Bypass Through User-Controlled Key vulnerability in Userprivatefiles Wordpress File Sharing Plugin The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced network low complexity userprivatefiles CWE-639	4.3

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.