CVE-2022-4061: JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload
Published Dec 19, 2022
·Updated
The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP.
Affected Software
1 affected component
ultimatemember Jobboardwp Wordpress<1.2.2
Event History
Dec 19, 2022
CVE Published
via MITRE·01:41 PM
Data Sourced
via MITRE·01:41 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2022-4061?
CVE-2022-4061 is a vulnerability in the JobBoardWP WordPress plugin before version 1.2.2 that allows unauthenticated users to upload arbitrary files such as PHP.
2
What is the severity of CVE-2022-4061?
CVE-2022-4061 has a severity rating of 7.5 (High).
3
How does CVE-2022-4061 impact Ultimatemember Jobboardwp?
CVE-2022-4061 affects Ultimatemember Jobboardwp version up to and excluding 1.2.2.
4
What is the Common Weakness Enumeration (CWE) for CVE-2022-4061?
The Common Weakness Enumeration (CWE) for CVE-2022-4061 is CWE-434.
5
How can I fix the CVE-2022-4061 vulnerability?
To fix the CVE-2022-4061 vulnerability, update the JobBoardWP plugin to version 1.2.2 or later.