7.5
Élevée
CVE-2023-6585 The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated…
Description
The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP JobSearch 2.3 | premières → < 2.3.4 | 2.3.4 |
| jobsearch_wp_job_board 2.3 | premières → < 2.3.4 | 2.3.4 |
Autres CVE de WP JobSearch
Les 4 CVE de WP JobSearch →
CVE-2023-6584
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only…
7.5
Élevée
CVE-2022-1168
There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1
Non notée
CVE-2021-24421
The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the…
Non notée