CVE-2023-29384criticalCWE-434

CVE-2023-29384: critical vulnerability in HM Plugin WordPress Job Board and Recruitment…

WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload

Published · Updated

Follow this CVE+ Monitor WordPress Job Board and Recruitment Plugin – JobWP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 10epss 1.4%
from disclosure to weapon244 days
Published on NVDDec 20
1st PoC+244d
Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
HM Plugin · WordPress Job Board and Recruitment Plugin – JobWP
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — HM Plugin WordPress Job Board and Recruitment…

In the same product, most dangerous first.

CVE-2023-48288HIGHWordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data ExposureEPSS 0.5%