Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4019
HistorySep 04, 2023 - 12:15 p.m.

Code injection

2023-09-0412:15:00
PRIOn knowledge base
www.prio-n.com
6
media
ftp
wordpress
code injection
plugin
security
vulnerability
rce
nvd

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files around, like wp-config.php, which may lead to RCE in some cases.

CPENameOperatorVersion
media_from_ftplt11.17

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

Related for PRION:CVE-2023-4019