Beveiligingsadvies

CVE-2023-4019

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-09-04 11:27:02

Laatst bijgewerkt 2025-04-23 16:17:56

Toegewezen door WPScan

CVSS-score 8.8

Status PUBLISHED

Beschrijving

The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files around, like wp-config.php, which may lead to RCE in some cases.

← Alle CVE's bekijken Bekijk op cve.org ↗