Front End Pm
Approved changes feed: RSS · Atom
cpe:2.3:a:shamimsplugins:front_end_pm:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Shamimsplugins (5a5e4999-5d7e-5e40-abdc-83bc405f1db1) |
|---|---|
| Product | Front End Pm (504ddaef-ecb2-5635-82b6-7c87126475fb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/shamim2883/front-end-pm |
purl2cpe | 2026-06-01 10:18:07.406971 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4930 |
vulnerable | 2026-06-08 06:16:15.124199 |
Front End PM < 11.4.3 - Sensitive Data Exposure via Directory Listing
The Front End PM WordPress plugin before 11.4.3 does not block listing the contents of the directories where it stores attachments to private messages, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled.
Published: 2023-11-06T20:41:02.644Z
Updated: 2025-02-26T21:21:14.187Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.