WordPress Ninja Job Board plugin <= 1.3.1 - Resume Disclosure via Directory Listing
PSID
c9171fc083aa
Classification
Sensitive Data Exposure
OWASP Top 10
A6: Sensitive Data Exposure
Required privilege
Can be exploited remotely without any authentication.
Publicly disclosed
2022-08-01
Patchstack vPatch available since
09.12.2021
Details
Resume Disclosure via Directory Listing discovered by Daniel Ruf in WordPress Ninja Job Board plugin (versions <= 1.3.1).
Solution
Update the WordPress Ninja Job Board plugin to the latest available version (at least 1.3.3).
References
Vulnerability details