CVE-2023-4297

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p49

Published

Nov 27, 2023 (Nov 27, 2023)

Modified

Jun 17, 2026

Description

The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.

Vendors: mediamanifesto
Products: mmm simple file list
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.