Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: Riverforest-wp Component: Media From Ftp Clear all filters
TI-2023-03731 CVE-2023-4019 · GHSA-jmf8-xh4v-2pr9

Media from FTP < 11.17 - Author+ Arbitrary File Access

Priority HIGH 73

The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files around, like wp-config.php, which may lead to RCE in some cases…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00823 Published 2023-09-04 Fixed in 11.17