Upload Resume <= 1.2.0 - Captcha Bypass
CVE-2023-2751

5.3MEDIUM

Key Information:

Vendor

Wordpress
Status
Upload Resume
Vendor
CVE Published:
19 June 2023

What is CVE-2023-2751?

The Upload Resume WordPress plugin through 1.2.0 does not validate the captcha parameter when uploading a resume via the resume_upload_form shortcode, allowing unauthenticated visitors to upload arbitrary media files to the site.

Affected Version(s)

Upload Resume 0 <= 1.2.0

References

https://wpscan.com/vulnerability/1b0fe0ac-d0d1-473d-af5b-...
exploitvdb-entrytechnical-description

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yakshita Sharma
WPScan
.