CVE-2023-5906

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 27, 2023
Updated: Dec 1, 2023

Summary

CVE-2023-5906 is a vulnerability found in the Job Manager & Career WordPress plugin before version 1.4.4. This vulnerability resides in the Directory Listings system, allowing unauthorized users to view and download private files of other users. The affected products include various versions of the Job Manager & Career WordPress plugin. To remediate this issue, users should update to version 1.4.4 or newer. This vulnerability poses a serious security threat as it enables attackers to access confidential data and files without authorization, compromising the privacy and security of affected organizations using this plugin.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2023-5906 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions