CVE-2023-4023

Summary

CVE-2023-4023 is a vulnerability found in the All Users Messenger WordPress plugin version 1.24 and earlier. This vulnerability allows non-administrator users to delete messages from the all-users messenger, posing a risk to organizations using this plugin. The exploitability score is 2.8, indicating a medium severity level. The privileges required for exploitation are low, and no user interaction is needed. The attack vector is through the network, and the impact on integrity is low while confidentiality is not impacted. To remediate this vulnerability, users should update their WordPress plugin to a version that fixes the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.