high7.5
CVE-2015-6668
The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload directory structure, r…
Impact
The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload directory structure, related to an insecure direct object reference.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wp-Jobmanager | Job Manager | through 0.7.24 |