CVE-2023-4933

WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing

published October 16, 2023

CVSS
—
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

The WP Job Openings WordPress plugin before 3.4.3 does not block listing the contents of the directories where it stores attachments to job applications, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00654 · 50.7th percentile
Published
2023-10-16T19:39Z
EPSS history
Timeline
  • 16 OCT 19:39Z
    WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing
    cvelistv5