Description
The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Simple Job Board | < 2.12.6 | 2.12.6 |
References
- https://wpscan.com/vulnerability/26403e72-c927-4649-b789-694a10ad0492/ exploit vdb-entry technical-description