CVE-2023-4019 — Media from FTP < 11.17 - Author+ Arbitrary File Access
The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files around, like wp-conf…
Published: 2023-09-04 · CVSS: 8.8 · CVSS 3.1
The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files around, like wp-config.php, which may lead to RCE in some cases.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7