Description (CNA)
The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files around, like wp-config.php, which may lead to RCE in some cases.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Media from FTP | affected 0 before 11.17 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.