CVE-2023-4023

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The All Users Messenger WordPress plugin through 1.24 does not prevent non-administrator users from deleting messages from the all-users messenger.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Aug 30, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-402356.5An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the naCVE-2023-402365.3In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, which allows authenticatCVE-2023-402385.5A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.CVE-2023-402397.5Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version iCVE-2023-40245.3The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_plaCVE-2023-40255.3The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_plaCVE-2023-402508.8Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows Overflow Buffers.ThisCVE-2023-402515.9Missing Encryption of Sensitive Data vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, GeniaCVE-2023-402529.8Improper Control of Generation of Code ('Code Injection') vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian CVE-2023-402539.8Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNCVE-2023-402549.8Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, GCVE-2023-402569.8A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to interact with the Rab
CVE-2023-4023: Medium severity, CVSS 4.3 | Vulnix