CVE-2020-35749
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 30%
from disclosure to weapon6 days
Published on NVDJan 15
1st PoC+6d
exploitation probability
30%top 2% of all CVEs
observed exploitation
nono source reports it
5 public exploit(s)
Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.
Affected products
n/a · n/apublic PoCs found — 5✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/49450exploitdbwww.exploit-db.com/exploits/50721unverifiedgithubgithub.com/M4xSec/Wordpress-CVE-2020-35749★ 6cve_referencepacketstormsecurity.com/files/161050/Simple-JobBoard-Authenticated-File-Read.htmlunverifiedcve_referencepacketstormsecurity.com/files/165892/WordPress-Simple-Job-Board-2.9.3-Local-File-Inclusion.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.