High severity8.8NVD Advisory· Published Sep 4, 2023· Updated Jun 17, 2026

CVE-2023-4019

Description

The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files around, like wp-config.php, which may lead to RCE in some cases.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Riverforest Wp/Media From FTP
cpe:2.3:a:riverforest-wp:media_from_ftp:*:*:*:*:*:wordpress:*:*
Range: <11.17
WordPress/Media from FTPdescription
WordPress/Media From FTPllm-fuzzy
Range: <11.17
Package: https://wordpress.org/plugins/media-from-ftp

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/0d323b07-c6e7-4aba-85bc-64659ad0c85dnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000