CVE-2023-4019 | BDVDB-2026-210984 Detail

Description#

The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files around, like wp-config.php, which may lead to RCE in some cases.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-09-04Record published in the CVE List.
2. Version 22025-04-23Most recent update recorded in the CVE List.