CVE-2024-7762

Simple Job Board < 2.12.6 - Unauthenticated Resumes Download

The Simple Job Board WordPress plugin before 2.12.6 does not prevent uploaded files from being listed, allowing unauthenticated users to access and download uploaded resumes

Affected

Simple Job Board

CVSS v3.1 CNA

3.7 LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.42% chance of exploitation in the next 30 days, 35th percentile

Published

2025-05-15

Updated

2025-08-29

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/26403e72-c927-4649-b789-694a10ad0492/

Security advisories

• https://wpscan.com/vulnerability/26403e72-c927-4649-b789-694a10ad0492

References

• CVE Record
• NVD entry