WP Shamsi – افزونه تاریخ شمسی و فارسی ساز وردپرس

WP Shamsi – افزونه تاریخ شمسی و فارسی ساز وردپرس has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.0, and the most serious one scores 6.5 out of 10. 2022 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (100%).

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2023.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.0/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all WP Shamsi – افزونه تاریخ شمسی و فارسی ساز وردپرس vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2023-0335

WP Shamsi <= 4.3.3 - Missing Authorization leading to Authenticated (Subscriber+) Attachment Deletion

Read the full analysis

Vulnerability Records

3 records


2023-02-28 00:00	WP Shamsi <= 4.3.3 - Missing Authorization leading to Authenticated (Subscriber+) Attachment Deletion WP Shamsi <= 4.3.3	`CVE-2023-0335`	4.3 Medium	István Márton	No
2022-11-28 00:00	WP Shamsi <= 4.1.0 - Missing Authorization to Arbitrary Plugin Deactivation WP Shamsi <= 4.1.0	`CVE-2022-4555`	6.5 Medium	Chloe Chamberland	Yes
2022-09-05 00:00	WP Shamsi <= 4.1.1 - Missing Authorization to Plugin Settings Update WP Shamsi <= 4.1.1	`CVE-2022-38058`	4.3 Medium	Muhammad Daffa	Yes

Showing 1–3 of 3 reports