CVE-2023-6585

JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE

High · published February 27, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
48.1
In the wild
Unconfirmed
What it is

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00602 · 48.1th percentile
Published
2024-02-27T08:30Z
EPSS history
Timeline
  • 27 FEB 08:30Z
    JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE
    cvelistv5