CVE-2023-6585: JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE
Published Feb 27, 2024
·Updated
The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server
Affected Software
2 affected components
WP JobSearch WP Job Board<2.3.4
Eyecix JobSearch WP Job Board WordPress<2.3.4
Event History
Feb 27, 2024
CVE Published
via MITRE·08:30 AM
Data Sourced
via MITRE·08:30 AM
DescriptionWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-6585?
CVE-2023-6585 is considered a critical vulnerability due to its potential for unauthorized file uploads by attackers.
2
How do I fix CVE-2023-6585?
To fix CVE-2023-6585, update the WP JobSearch plugin to version 2.3.4 or later.
3
What types of files can be uploaded due to CVE-2023-6585?
CVE-2023-6585 allows the upload of arbitrary files, including potentially malicious PHP files.
4
Who is affected by CVE-2023-6585?
Any site using the WP JobSearch WordPress plugin versions prior to 2.3.4 is affected by CVE-2023-6585.
5
Can CVE-2023-6585 be exploited without authentication?
Yes, CVE-2023-6585 can be exploited by unauthenticated attackers, making it particularly dangerous.