Lucene search

K
patchstackWpl0v3rPATCHSTACK:84D22112491F1C30167C3777FF17D556
HistoryJan 09, 2018 - 12:00 a.m.

WordPress Media from FTP plugin <=9.84 - Authenticated Directory Traversal vulnerability

2018-01-0900:00:00
wpl0v3r
patchstack.com
4

0.001 Low

EPSS

Percentile

42.3%

Authenticated Directory Traversal vulnerability found by wpl0v3r in WordPress Media from FTP plugin (versions <=9.84). Vulnerable via exists via the “searchdir” parameter to the wp-admin/admin.php?page=mediafromftp-search-register URI.

Solution

           Update the WordPress Media from FTP plugin to the latest available version (at least 9.85).
CPENameOperatorVersion
media from ftple9.84

0.001 Low

EPSS

Percentile

42.3%

Related for PATCHSTACK:84D22112491F1C30167C3777FF17D556