CVE-2023-4933
WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing
- State
- Published
- Severity
- Not scored
- Published
- Oct 16, 2023
- Updated
- Aug 2, 2024
- Reserved
- Sep 13, 2023
Description
The WP Job Openings WordPress plugin before 3.4.3 does not block listing the contents of the directories where it stores attachments to job applications, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
WP Job OpeningsUnknown |
|
References
- https://wpscan.com/vulnerability/882f6c36-44c6-4273-81cd-2eaaf5e81fa7exploitvdb-entrytechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.