CVE-2018-5310: Media From FTP Project Media From FTP

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

In the "Media from FTP" plugin before 9.85 for WordPress, Directory Traversal exists via the searchdir parameter to the wp-admin/admin.php?page=mediafromftp-search-register URI.

Affected products

• Media From FTP Project Media From FTP: before 9.85 (fixed in 9.85)

Published 2018-01-09. Last modified 2026-06-17.