CVE-2023-4023

MediumCVSS 4.3

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

The All Users Messenger WordPress plugin through version 1.24 does not prevent non-administrator users from deleting messages.

This may lead to unauthorized deletion of important messages, affecting the integrity of communication within the organization.

It is recommended to update the plugin to the latest version and restrict user permissions for deleting messages.

Original NVD description (English source)

The All Users Messenger WordPress plugin through 1.24 does not prevent non-administrator users from deleting messages from the all-users messenger.