Media from FTP < 11.17 - Author+ Arbitrary File Access

CVE-2023-4019

Summary

The Media from FTP plugin for WordPress prior to version 11.17 is susceptible to an improper access control vulnerability. This flaw allows users with elevated author+ privileges to exploit the plugin's file management capabilities. Consequently, they may move essential files, such as wp-config.php, potentially leading to remote code execution in certain environments. It is crucial for users to update to the latest version to mitigate this risk.

References