Approved changes feed: RSS · Atom

cpe:2.3:a:riverforest-wp:media_from_ftp:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorRiverforest Wp (01efb5b0-c854-52b8-8e1b-d81e8b5e51d8)
ProductMedia From Ftp (1d14b48f-c095-58d5-ad0d-51fa6e1dcfe5)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4019 vulnerable 2026-06-08 06:16:10.978477 Media from FTP < 11.17 - Author+ Arbitrary File Access
The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files around, like wp-config.php, which may lead to RCE in some cases.
Published: 2023-09-04T11:27:02.512Z
Updated: 2025-04-23T16:17:56.670Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.