CVE-2023-33263: Wftpd Project Wftpd

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory. NOTE: this is a product from 2006.

Affected products

• Wftpd Project Wftpd: version 3.25 only

Published 2023-05-25. Last modified 2026-06-17.