Medium · 4.3 CVE-2023-4023 EUVD-2023-53916GHSA-7rm2-xq32-ww37

All Users Messenger <= 1.24 - Subscriber+ Message Deletion via IDOR

Published Aug 30, 2023 · Updated May 5, 2025 · Assigned by WPScan

Description

The All Users Messenger WordPress plugin through 1.24 does not prevent non-administrator users from deleting messages from the all-users messenger.

Vendor	Product	Affected	Fixed
—	All Users Messenger	≤ 1.24	—