9.9
Critique
CVE-2024-8614 The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
Description
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_wp_handle_upload() function in all versions up to, and including, 2.6.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| jobsearch_wp_job_board 2.6 | premières → 2.6.7 | Pas de correctif indiqué |
| JobSearch WP Job Board 2.6 | premières → 2.6.7 | Pas de correctif indiqué |
| JobSearch WP Job Board 2.6 | premières → 2.6.7 | Pas de correctif indiqué |
Autres CVE de jobsearch_wp_job_board
Les 7 CVE de jobsearch_wp_job_board →
CVE-2024-11925
The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and…
9.8
Critique
CVE-2024-8615
The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
10.0
Critique
CVE-2024-43929
Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by…
6.5
Moyenne
CVE-2024-43931
Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects…
9.8
Critique