CVE-2015-6668 | BDVDB-2026-91763 Detail

Description#

The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload directory structure, related to an insecure direct object reference.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://wpvulndb.com/vulnerabilities/8167
https://vagmour.eu/cve-2015-6668-cv-filename-disclosure-on-job-manager-wordpress-plugin/

Exploit#

No public exploit known

History#

Version 12017-10-19Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.