9.9
Critical
CVE-2024-8614 The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
Description
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_wp_handle_upload() function in all versions up to, and including, 2.6.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jobsearch_wp_job_board 2.6 | earliest → 2.6.7 | No fix stated |
| JobSearch WP Job Board 2.6 | earliest → 2.6.7 | No fix stated |
| JobSearch WP Job Board 2.6 | earliest → 2.6.7 | No fix stated |
Other CVEs of jobsearch_wp_job_board
The 7 CVEs of jobsearch_wp_job_board →
CVE-2024-11925
The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and…
9.8
Critical
CVE-2024-8615
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
10.0
Critical
CVE-2024-43929
Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by…
6.5
Medium
CVE-2024-43931
Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects…
9.8
Critical