CVE-2015-6668 Job Manager <= 0.7.25 - Insecure Direct Object Reference
HighCVSS 7.5
EPSS 9.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload directory structure, related to an insecure direct object reference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wp-jobmanager job manager | <= 0.7.24 | No fix listed |
| wordpress job-manager(WordPress) | <= 0.7.25 | No fix listed |
References
- vagmour.eu exploit technical-description third-party-advisory
- wpvulndb.com exploit third-party-advisory vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org