Read the docs

Riverforest-wp

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Riverforest-wp records in CISA KEV

No Riverforest-wp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Simple Blog Card 2 records MEDIUM All Users Messenger 1 record MEDIUM Media From Ftp 1 record HIGH

Records

1 record in Media From Ftp · all components

TI-2023-03731 CVE-2023-4019 · GHSA-jmf8-xh4v-2pr9

Media from FTP < 11.17 - Author+ Arbitrary File Access

Priority HIGH 73

The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files around, like wp-config.php, which may lead to RCE in some cases…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00823 Published 2023-09-04 Fixed in 11.17
Open these records in search →