The All Users Messenger WordPress plugin through 1.24 does not prevent non-administrator users from deleting messages from the all-users messenger.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2023-08-30T14:22:03.825Z

Updated: 2024-08-02T07:17:11.231Z

Reserved: 2023-07-31T15:44:17.837Z

Link: CVE-2023-4023

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-08-30T15:15:09.657

Modified: 2023-11-07T04:22:03.717

Link: CVE-2023-4023

cve-icon Redhat

No data.