Skip to content
Sign in
7.5 High

CVE-2023-6585 The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated…

Description

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

Affected products and versions

Product Affected versions Fixed in
WP JobSearch 2.3 earliest → < 2.3.4 2.3.4
jobsearch_wp_job_board 2.3 earliest → < 2.3.4 2.3.4

Other CVEs of WP JobSearch

The 4 CVEs of WP JobSearch →
CVE-2023-6584 The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only… 7.5 High CVE-2022-1168 There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1 Not rated CVE-2021-24421 The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the… Not rated
Track this CVE