WordPress Plugin Vulnerabilities
Upload Resume <= 1.2.0 - Captcha Bypass
Description
The plugin does not validate the captcha parameter when uploading a resume via the resume_upload_form shortcode, allowing unauthenticated visitors to upload arbitrary media files to the site.
Proof of Concept
Affects Plugins
No known fix References
CVE
YouTube Video
Miscellaneous
Original Researcher
Yakshita Sharma
Submitter
Yakshita Sharma
Submitter twitter
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2023-05-24 (about 2 years ago)
Added
2023-05-24 (about 2 years ago)
Last Updated
2023-05-24 (about 2 years ago)
WPScan 