CVE-2024-7762: Simple Job Board < 2.12.6 - Unauthenticated Resumes Download
Published May 15, 2025
·Updated
The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes
Affected Software
2 affected components
Simple Job Board WordPress plugin<2.12.6
PressTigers Simple Job Board Wordpress<2.12.6
Event History
May 15, 2025
CVE Published
via MITRE·08:07 PM
Data Sourced
via MITRE·08:07 PM
DescriptionWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-7762?
CVE-2024-7762 has a medium severity rating due to its potential for exposure of sensitive user information.
2
How do I fix CVE-2024-7762?
To fix CVE-2024-7762, update the Simple Job Board WordPress plugin to version 2.12.6 or later.
3
What type of vulnerability is CVE-2024-7762?
CVE-2024-7762 is an information disclosure vulnerability that allows unauthenticated users to access uploaded files.
4
Who is affected by CVE-2024-7762?
Users of the Simple Job Board WordPress plugin version prior to 2.12.6 are affected by CVE-2024-7762.
5
What impact does CVE-2024-7762 have on users?
CVE-2024-7762 can lead to the unauthorized exposure of uploaded resumes to malicious actors.