Lucene search
Yakshita SharmaWPVDB-ID:1B0FE0AC-D0D1-473D-AF5B-DAD6217933D4HistoryMay 24, 2023 - 12:00 a.m.
Upload Resume <= 1.2.0 - Captcha Bypass
2023-05-2400:00:00
Yakshita Sharma
wpscan.com
10
captcha bypass
arbitrary files
security vulnerability
unauthenticated upload
software
0.001 Low
EPSS
Percentile
23.0%
The plugin does not validate the captcha parameter when uploading a resume via the resume_upload_form shortcode, allowing unauthenticated visitors to upload arbitrary media files to the site.
PoC
The PoC will be displayed once the issue has been remediated
| CPE | Name | Operator | Version |
|---|---|---|---|
| resume-upload-form | eq | * |
Related
prion
prion
Design/Logic Flaw
2023-06-19 11:15:00
cvelist
cvelist
CVE-2023-2751 Upload Resume <= 1.2.0 - Captcha Bypass
2023-06-19 10:52:52
cve
cve
CVE-2023-2751
2023-06-19 11:15:10
nvd
nvd
CVE-2023-2751
2023-06-19 11:15:10
wpexploit
wpexploit
Upload Resume <= 1.2.0 - Captcha Bypass
2023-05-24 00:00:00
wordfence
wordfence