CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NCVE-2023-0335
Medium (6.5) in wpvar wp shamsi. EPSS 1.0% chance of exploitation in the next 30 days.
The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber delete attachment.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-352, CWE-862
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wpvar:wp_shamsi