Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68897
HistoryApr 07, 2022 - 12:00 a.m.

WordPress JobMonster Theme plugin information leakage vulnerability

2022-04-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

30.8%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress JobMonster Theme plugin has an information disclosure vulnerability that stems from the vulnerability of the obMonster theme to the /wp content/uploads/JobMonster/ folder directory listing attack, because it does not contain the default PHP files. An attacker could use this vulnerability to obtain sensitive information, such as people’s resumes.

0.001 Low

EPSS

Percentile

30.8%

Related for CNVD-2022-68897