CVE-2015-6668

CVE-2015-6668 제목: Job-Manager WP 플러그인의 CV 파일명 노출...

CVE-2015-6668

CVE-2015-6668 - Job Manager IDOR CVE-2015-6668（Job Manager //filename.ext）。 攻撃パターン: 一般的な年/月フォルダとファイル名のバリエーションをブルートフォース / 列挙して、アクセス可能なファイルを特定します。 指標: 構築されたURLに対するHTTP 200応答は、公開されたファイルに到達可能であることを示します。 このツールは単純なGETリクエストを実行し、（デフォルトでは）最初に発見した公開ファイルを報告します。 説明...

Job-Manager-Disclosure

CV 파일명 공개 스캐너 – CVE-2015-6668 이 스크립트는 WordPress용 WP Job Manager 플러그인버전 ≤ 0.7.25과 관련된 취약점 CVE-2015-6668을 통해 공개적으로 노출된 CV 파일예: .jpg, .png, .jpeg을 자동으로 검색합니다. 🧠 설명 이 취약점은 사용자가 업로드한 파일예: 이력서의 정확한 이름을 웹 서버의 예측 가능한 업로드 경로에 직접 접근하여 알아낼 수 있게 합니다. 이 스크립트는: 이름, 연도, 월 및 확장자를 기반으로 경로를 구성합니다. 가능한 모든 URL에 HTTP...

CVE-2015-6668

CVE-2015-6668 Python 3용으로 변환된 CVE-2015-6668에 대한 Evangelos Mourikis의 POC Wordpress용 Job Manager 플러그인의 IDOR 취약점을 악용합니다. Python 3.11.9에서 테스트됨 참고 자료 NIST CVE WPScan 취약점 DB 설치 및 사용법 저장소를 클론하고, 원한다면 가상 환경을 설정하고, requests를 설치한 후 Python 3로 스크립트를 실행하세요. 클론 git clone...

js-jobs

js-jobs JS Job Manager 플러그인을 활성화하려면 여기에는 제한이 있습니다. 플러그인에 /.php 파일이 있어야 하며, 그렇지 않으면 활성화되지 않습니다: POST /wp-admin/admin-ajax.php HTTP/1.1 Accept: / Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With:...

PYSEC-2026-3442

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.This issue affects Apache Gravitino: from 1.0.0 through 1.2.1.Users are recommended to upgrade to...

CVE-2026-49876 Apache Gravitino: Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 through 1.2.1. Users are recommended to upgrade to...

WordPress Go Fetch Jobs (for WP Job Manager) plugin <= 1.8.4.8.1 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Go Fetch Jobs for WP Job Manager versions = 1.8.4.8.1...

CVE-2026-39660

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.1...

EUVD-2026-20330

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.1...

CVE-2026-39660

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-39660

...

CVE-2026-39660

The CVE-2026-39660 entry corresponds to a Missing Authorization vulnerability in Automattic WP Job Manager (wp-job-manager) that enables exploitation via Incorrectly Configured Access Control Security Levels. Affected version range is WP Job Manager from n/a through

CVE-2026-39660

...

CVE-2026-39660

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

PT-2026-31223

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.1...

WordPress plugin WP Job Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

CVE-2026-25404

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.0...

CVE-2026-25404

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.0...

CVE-2026-25404 WordPress WP Job Manager plugin <= 2.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.0...