{"id":"CVE-2023-4836","aliases":["CLSA-2023-1697016696","EUVD-2023-54677","GHSA-r75f-cj9v-2727"],"status":"published","title":"WordPress File Sharing Plugin \u003c 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR","description":"The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00602,"percentile":0.49073,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-639"],"published":"2023-10-11T09:31:40Z","modified":"2026-06-17T06:38:43Z","affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libwebp-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libwebp6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libwebpdemux2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libwebpmux3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"webp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.2.tuxcare.els1"}]}],"bundled":2}],"products":[{"vendor":"unknown","product":"wordpress file sharing plugin"},{"vendor":"userprivatefiles","product":"wordpress_file_sharing_plugin"}],"references":[{"url":"https://wpscan.com/vulnerability/c17f2534-d791-4fe3-b45b-875777585dc6","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://research.cleantalk.org/cve-2023-4836-user-private-files-idor-to-sensitive-data-and-private-files-exposure-leak-of-info-poc","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4836"},{"url":"https://github.com/advisories/GHSA-r75f-cj9v-2727"},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1697016696","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-4836","title":"WordPress File Sharing Plugin \u003c 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR","description":"The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced","status":"published","published":"2023-10-31T13:54:46.188Z","modified":"2025-04-03T13:21:19.295Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:35:30.474787Z"}],"euvd":[{"id":"EUVD-2023-54677","description":"The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced","status":"published","published":"2023-10-31T13:54:46Z","modified":"2025-04-03T13:21:19Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:44.372321Z"}],"ghsa":[{"id":"GHSA-r75f-cj9v-2727","title":"The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization...","description":"The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced","status":"published","published":"2023-10-31T15:30:23Z","modified":"2023-11-17T05:04:33Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:55:03.903531Z"}],"nvd":[{"id":"CVE-2023-4836","description":"The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced","status":"published","published":"2023-10-31T14:15:12.16Z","modified":"2026-06-17T06:38:43.017Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:08:41.047232Z"}],"osv":[{"id":"CLSA-2023-1697016696","title":"Fix CVE(s): CVE-2023-4863, CVE-2023-4836","description":"\n   * SECURITY UPDATE: Heap buffer overflow\n     - debian/patches/CVE-2023-4863-pre.patch: prepare sources to be patched\n     - debian/patches/CVE-2023-4863-1.patch: first, BuildHuffmanTable() is\n       called to check if the data is valid. If it is and the table is not big\n       enough, more memory is allocated. This will make sure that valid (but\n       unoptimized because of unbalanced codes) streams are still decodable.\n     - debian/patches/CVE-2023-4863-2.patch: fix memory error\n     - debian/patches/CVE-2023-4863-3.patch: remove unused code\n     - debian/patches/CVE-2023-4863-4.patch: fix pointer offset int overflow\n     - CVE-2023-4836","status":"published","published":"2023-10-11T09:31:40Z","modified":"2026-06-04T10:03:38.529775578Z","updated_at":"2026-11-02T15:43:40.509998Z"}]}}