title: WordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR
description: The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced
problem types: CWE-639 Authorization Bypass Through User-Controlled Key
affected:
{
vendor: Unknown
product: WordPress File Sharing Plugin
versions:
status: affected, versionType: custom, version: 0, lessThan: 2.0.5
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}