CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.0.
Explanation of Vulnerability in Simple Terms
The JobWP WordPress plugin through version 2.0 does not properly validate file uploads, allowing unauthenticated attackers to upload arbitrary files to the server. An attacker can upload malicious PHP files or other executable code without restriction, leading to complete site compromise. This vulnerability requires no authentication, user interaction, or special configuration.
What an attacker can do
Upload and execute arbitrary files (including PHP code) on the site without authentication.
Potential impact on your site
Complete site compromise: attackers can run code, steal data, modify content, or take the site offline.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
