10.0
Critical
CVE-2024-8615 The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
Description
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_location_load_excel_file_callback() function in all versions up to, and including, 2.6.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jobsearch_wp_job_board 2.6 | earliest → 2.6.7 | No fix stated |
| JobSearch WP Job Board 2.6 | earliest → 2.6.7 | No fix stated |
| JobSearch WP Job Board 2.6 | earliest → 2.6.7 | No fix stated |
Other CVEs of jobsearch_wp_job_board
The 7 CVEs of jobsearch_wp_job_board →
CVE-2024-11925
The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and…
9.8
Critical
CVE-2024-8614
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
9.9
Critical
CVE-2024-43929
Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by…
6.5
Medium
CVE-2024-43931
Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects…
9.8
Critical