CVE-2023-4019

Katalog CVE

CVSS 8.8 · High EPSS 0,82%

Kerentanan pada riverforest-wp media from ftp. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files around, like wp-config.php, which may lead to RCE in some cases.

Rincian

Terbit di NVD

4 September 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,82% peluang dieksploitasi; lebih tinggi dari 56,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/0d323b07-c6e7-4aba-85bc-64659ad0c85d exploit · advisory pihak ketiga