Lucene search

CVE-2024-11712 WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download

🗓️ 14 Dec 2024 06:16:45Reported by WordfenceType

Vulnerability in WP Job Portal allows unauthorized resume downloads by unauthenticated attackers.

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2024-11712	14 Dec 202407:15	–	cve
NVD	CVE-2024-11712	14 Dec 202407:15	–	nvd
Cvelist	CVE-2024-11712 WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download	14 Dec 202406:45	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 9, 2024 to December 15, 2024)	19 Dec 202417:13	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3202327/wp-job-portal/tags/2.2.3/modules/resume/model.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ecc87d5f-dba4-40f8-946f-f2634614b579
gist	www.gist.github.com/g1-nhantv/245d2829c1b489f61c9124086506b6b8
gist	www.gist.github.com/g1-nhantv/7a26a9681eb3413d8be9323fb151fdcd

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Dec 2024 06:45Current

6.8Medium risk

Vulners AI Score6.8

CVSS35.3

EPSS0.001

SSVC

CWE-359