CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The Jobs for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.7.11 via the 'job_postings_get_file' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Explanation of Vulnerability in Simple Terms
The Job Postings plugin for blueglassch contains a path traversal vulnerability in versions up to 2.7.11. An authenticated user with low privileges can read arbitrary files from the server by manipulating file path parameters. This allows disclosure of sensitive configuration files, database credentials, and other confidential data stored on the web server.
What an attacker can do
Read arbitrary files from the server, including configuration and credential files.
Potential impact on your site
Sensitive files like database credentials and configuration may be exposed to authenticated users.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
