Unscored CVE-2018-5310 EUVD-2018-17089GHSA-gr39-96qx-fw82

In the "Media from FTP" plugin before 9.85 for WordPress, Directory Traversal exists via the searchdir parameter to the wp-admin/admin.php?…

Published Jan 9, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Description

In the "Media from FTP" plugin before 9.85 for WordPress, Directory Traversal exists via the searchdir parameter to the wp-admin/admin.php?page=mediafromftp-search-register URI.

References

https://wordpress.org/plugins/media-from-ftp/#developers
https://wordpress.org/support/topic/any-directory-traversal-bugs-at-the-latest-version-of-media-from-ftp/
https://github.com/d4wner/Vulnerabilities-Report/blob/master/media-from-ftp.md