CVE-2023-6585 JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE

2024-02-2708:30:25

WPScan

www.cve.org

cve

jobsearch

wordpress

plugin

validation

files

upload

unauthenticated

attackers

php

server

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "WP JobSearch",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "2.3.4"
      }
    ],
    "defaultStatus": "unaffected"
  }
]