CVEvulnerability
CVE-2022-2544
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-08-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-425
Description
The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.
Affected configurations
• wpmanageninja ninja job board (< 1.3.3)
Related
Weakness · CWE (1)
- CWE-425 Direct Request weakness
References
- https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php Patch, Third Party Advisory
- https://wpscan.com/vulnerability/a9bcc68c-eeda-4647-8463-e7e136733053 Exploit, Third Party Advisory
- https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php Patch, Third Party Advisory
- https://wpscan.com/vulnerability/a9bcc68c-eeda-4647-8463-e7e136733053 Exploit, Third Party Advisory